The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
2answers
33 views

Airprobe and kraken related questions

I'm setting up test machine for my engineer work, to check GSM security and SMS interception. I already have an N210 and read a lot of documentation. There are some questions I have but can't find on ...
2
votes
3answers
100 views

How to protect against rogue Base Stations? [closed]

I just read the answer to the question here and it sounds surprisingly simple for calls/SMS (and data?) to be intercepted by a fake base station. From what I understand, if you were to walk past ...
0
votes
1answer
45 views

Is it possible to make a different encryption for a phone communication?

I wanted to know if maybe it's possible to make a phone communication more secure than the current A5/1 (used for GSM). Or maybe create a special tunnel between two phones. I mean like an ssh ...
4
votes
1answer
90 views

What is the proliferation of IMSI Catchers?

We know that IMSI-catcher detectors such as the Android-IMSI-Catcher-Detector project exist, but has anyone done a field study across various parts of the world as to how many there are and where? ...
1
vote
0answers
50 views

Possible to use Cellular encryption data to validate Geolocation?

I need offline-verifiable, time stamped, GPS signals or its equivalent. Since cellular protocols include time stamps, encryption keys and other data, perhaps it's possible to re-use this ...
0
votes
1answer
21 views

In GSM is it correct to say A8 uses the random generated by the Auc and Ki to generate Kc?

In GSM is it correct to say the AuC uses A8 algorithm with as input a nonce and Ki to generate Kc used for encryption communication between the subscriber and base station? If not how is Kc forwarded ...
0
votes
1answer
64 views

Is it possible for someone to send messages from my phone and seem like if I send it to them? [closed]

Ok so there's this guy who pays my iPhone6 and lately it's been sending messages to him as if I was the person who typed it but it wasn't me... Does anyone get me? Someone please help!!
5
votes
2answers
63 views

Where does the GSM A5 key come from? Why isn't DH used?

I've read this article about NSA allegedly stealing SIM cards from Gemalto which states: After a SIM card is manufactured, the encryption key, known as a “Ki,” is burned directly onto the chip. A ...
0
votes
1answer
92 views

Is there any secure way to transfer data between mobile phones without Internet? [closed]

Assume that I don't have any Internet access in my country. The only thing that I have is a mobile phone with a 3G or 4G SIM card inside. The mobile operator didn't provide any Internet access also. ...
3
votes
1answer
284 views

Is a fake base station needed for IMSI catching?

If you read about cell phone tracking it looks an IMSI Catcher always uses a fake base station the get the phones IMSI. I don't understand why this is necessary. Couldn't they just passively read the ...
1
vote
2answers
1k views

Can someone listen GSM calls with RTL-SDR dongle if A5/1 cryptography is successfully cracked?

Can an attacker listen GSM calls in clear audio form (real time) using RTL-SDR dongle if he/she has powerful-enough hardware to crack the A5/1 crypto scheme in countries where no more secure ...
32
votes
4answers
6k views

Why is GSM still used?

GSMs vulnerabilities have been known a long time now. UMTS was supposed to fix those problems. Why is GSM still used?
6
votes
3answers
2k views

Is it possible to track a missing brand new phone? [closed]

I ordered a Nokia phone online and it turned out that the packet had been tampered and the phone was missing from the package. Obviously it does not have a SIM card, etc. I assume someone stole it ...
0
votes
3answers
259 views

Can my GSM network operator figure out the name of the Wi-Fi access point I am connected to?

I recently saw a film where the police were able to locate where the criminal was because the GSM network operator knew the name of the Wi-Fi access point the phone of the criminal was connected to ...
1
vote
3answers
804 views

How does a GSM triangulation work? [closed]

A have always been told that to get a geolocation of mobile phones there is the need 'ping' it with at least three cells. So actually, a standard and basic triangulation would just get from three ...
17
votes
5answers
6k views

Are SMS,MMS stored on the network service providers' servers?

Are SMS and MMS sent via a mobile phone stored on telecommunication service providers' servers before passing them to the recipient? Does it depend on the country or does every network service ...
-1
votes
2answers
807 views

Can you listen to your last GSM call recorded when calling back a user?

My wife called a GSM/3G number abroad and the call was dropped. She called again and she could hear the whole conversation repeated with the other party but with blank period from her side of the ...
1
vote
0answers
66 views

GSM mobile messages with the first octet 01000000

In GSM networks, it is found that there are so many mobile phone messages (uplink) with the first octet 01000000. For example, the 28-octet message ...
1
vote
2answers
692 views

GSM A5/1 encryption: Key management

I'm currently studying the A5/1 algorithm used for GSM encryption. I understood how thanks to the symmetric private Key and a public counter frame one can encrypt the communication between A and B. ...
1
vote
1answer
359 views

Why does not GSM use any stream cipher mode (OFB, CFB)?

If I understand correctly GSM uses A5/1 stream cipher. My question is why doesn't it use a stream cipher mode like OFB or CFB?
1
vote
2answers
274 views

Is there man in middle attack when using mobile phone calls?

My question is about the encryption between me and my mobile operator. My mobile operator uses A5/1. I use Samsung. Sometimes I see the symbol G on my phone which means GPRS. I don't know whether it ...
5
votes
3answers
2k views

Which is safer, GSM or CDMA?

I have read in the past (no sure where) that unfortunately there exist illegal devices that permit crooks to eavesdrop on GSM mobile phone conversations. I recently also heard that some people had ...
7
votes
2answers
605 views

Is there a way to notify me when my Android phone connects to an unencrypted GSM network?

As far as I know when a phone connects to a GSM (2G or 3G) network, the connection is encrypted. When I get in range of let's say an IMSI Catcher, I imagine this connection will not be encrypted in ...
3
votes
2answers
799 views

What to do when GSM/Wifi is jammed and ethernet cables are cut?

So.. There are household alarm systems (to defend against burglars) which send SMS/e-mail alerts if an intruder has been detected or an alert is trigged. However, Mobile networks can be jammed, and ...
1
vote
2answers
1k views

Fake GSM mobile number?

IMHO there was a Blackhat video about it, but cannot find it: Is it an existing problem that a mobile phone number could be faked? I mean when using internet banking: The attacker gained the ...
6
votes
7answers
2k views

Strategies against jamming attacks?

We have some devices which are designed to use standard frequencies/protocols, such as GSM, CDMA, GPS, Wifi and Bluetooth, among others. While our focus is not thought to be used for high-profile ...
0
votes
2answers
2k views

Is it feasible to make an IMEI sniffer the size of a matchbox within EU legislation?

I want to produce a list over the GSM phones in an area. I don't care about what data goes back and forth, neither are the various conversations relevant. Most phones have IMEI (International Mobile ...
5
votes
2answers
963 views

Is my SIM card vulnerable to DES cracking?

Srlabs have recently published article stating that many SIM cards can be exploited using vulnerability in DES: [...] While the option exists to use state-of-the-art AES or the somewhat outdated ...
22
votes
4answers
10k views

Are phone calls on a GSM network encrypted?

When I make a call on my cellphone (on a GSM network), is it encrypted?
8
votes
1answer
420 views

Getting strange texts to an iPhone #PWD123456#00X

My dad is getting strange SMS texts to his iPhone 4 Some examples: #PWD123456#WHL003=2308480298 #PWD123456#WHL004=2398480389 #PWD123456#WHL002 #PWD123456#WHL002 #PWD123456#STATUS? ...
4
votes
1answer
138 views

Voice Call Safety

When i was dealing with an assistant of my bank through mobile call, she asked me to insert my bank login code after a beep. I was wondering if this procedure is secure against a malicious agent who ...
4
votes
1answer
405 views

HTTP over GPRS - is it secure?

I have project involving a M2M device. The device is not capable of HTTPS but may be required to send and receive information that we would rather not be leaked out. The device will communicate ...
0
votes
0answers
41 views

Sniff GSM packets Wireshark [duplicate]

Possible Duplicate: Smartphone / GSM Sniffer I noticed in a video on youtube is possible to sniff gsm traffic using wireshark. How is this possible ? Do I need a GSM modem to acheive this ...
6
votes
1answer
576 views

What governing body is responsible for the use of GSM SMS alphanumeric SenderID's?

Currently, I am writing a paper about GSM sender spoofing and how this flaw is possible with the use of different techniques and attack pattern in the GSM 2G implementation both technically and ...
10
votes
1answer
27k views

How to spoof a cell phone tower (cell site, base station) — homemade IMSI-Catcher

An answer to a recent question has given me an idea for a school project (security CS program). Also, an active attacker (with a fake base station) can potentially force a mobile phone to use ...
8
votes
2answers
11k views

sniffing/recording GSM 3G signals

Is it possible to sniff or record and process GSM 3G signals (from some reciever) given that there is no other signals interrupting etc (the most comfortable conditions) Update (with some supporting ...
10
votes
1answer
7k views

Mobile numbers capture and transmit data

will it be possible to build a low cost hardware/software device which can capture mobile numbers within a specified radius and then use that information to transmit an sms to those numbers? From what ...
3
votes
3answers
755 views

Are there known hacks or security problems on broadband USB dongles?

USB broadband dongles seem to be common everywhere now though I'm not sure what the most widely accepted name for them is. In case I'm using poor terminology I'm referring to USB sticks which contain ...
14
votes
3answers
5k views

Smartphone / GSM Sniffer

This question would be in the category of SmartPhone Sniffers. So we have sniffers that can show the packets that are being sent across a wired or wireless (802.11) network. I am just performing a ...