Questions tagged [gsm]

a standard developed by the European Telecommunications Standards Institute for the second generation of digital cellular networks, used by mobile phones. It is the default global standard for mobile communications.

Filter by
Sorted by
Tagged with
1
vote
1answer
62 views

Security assessment of a legacy SSL/TLS implementation on an IoT device

I am doing a security assessment on the communication security of a legacy IoT device. The objective is to assess and find security gaps in the current design/implementation. The mode of assessment is ...
2
votes
1answer
502 views

Is inputting credit card numbers over a mobile phone secure?

I'm in the UK. In order to top up a pay-as-you-go SIM card, I had to first ring the mobile network to associate my bank card with the SIM before asking them to credit £10 to it (future top-ups don't ...
1
vote
0answers
56 views

Simulating 5G cellular on ns-3 simulator [closed]

Does this module: https://apps.nsnam.org/app/mmwave/ also include the encryption/decryption process of the 5G? What I mean is when I run this module on ns-3, it will process encryption/decryption also?...
3
votes
2answers
349 views

2-step authorization (using SMS) is less secure than having 2-factor disabled at all!

I've been thinking about this subject, and found paradoxical fact. Having a service that has 2-step authorization using SMS might become more harmful and open vulnerability hole (read SMS can be ...
1
vote
1answer
137 views

GSM encryption/decryption algorithms

I have seen around the internet devices like this: https://www.cryptophone.de/ and software that reinforce the security on cellphones. My question is simple, since the cellphones use A5/1, A5/2, A5/3 ...
0
votes
1answer
47 views

A SIM module-based security system and radio signal interruptions

I would like to setup a simple alarm system using something like a Raspberry Pi or Arduino, some sensors, and a SIM module to send me an alarm when an intrusion is detected. If I were dealing with an ...
2
votes
1answer
774 views

What is more safe: 3g/4g or public wifi?

The scenario is: John is out of home and, using his smartphone, he need to send some messages from Whatsapp, use Facebook's app and do some bank operations. Since I have read this and this topics, I'...
1
vote
1answer
20k views

Getting called from hidden caller ID, what are the dangers if I answer?

My girlfriend has been getting calls on her iPhone from a hidden caller ID for several days in a row now. She has not answered any of them because we figured it can't be anything good if it's hidden. ...
0
votes
0answers
565 views

What are the dangers of using 3g/4g in smartphones?

Since we should always avoid public networks, is there some sort of attack that intercept my online activity or steal passwords when I'm using 3g/4g? If exists, how I can protect myself from this type ...
0
votes
2answers
168 views

Who: phone manufacturers, GSM operators or OS-creators (or whoever) should care that our mobiles do not to connect to rogue GSM towers?

Which one in this chain should be blamed for not taking care of security: Phone manufacturers, GSM operators, SIM card manufacturers or OS systems (Android, iOS, etc..) to protect our phones from ...
1
vote
1answer
578 views

Do mobile phones automatically connect to spoofed cellular tower antenna?

I was told that an attacker is able to create a fake cellular tower antenna imitator near your mobile phone, and your phone will automatically connect to it, whether that antenna has an encrypted ...
0
votes
2answers
4k views

View packets of whatsapp?

I start doing a research about what's actually delivered from some android applications (such as telegram or whatsapp) outside to the world. I do it in the following mediums: 1. Wifi 2. GSM It ...
1
vote
0answers
365 views

How to retrieve the Ki value of sim card?

I was wondering is there any way to catch the Ki value in the SIM card by any coding? Is there a tool for that? NOTE: Ki, only exist in SIM (Mobile Station) and BSC database. It won't be transmitted ...
5
votes
1answer
335 views

GSM - Implementing Cipher Mode Command on YateBTS

I've been studying on Yate & YateBTS source code for a while, and I was wondering why there is no ciphering mode implementation in the source!? I use the combination of BladeRF x40 FPGA and ...
0
votes
2answers
336 views

How are USSD messages used and who could send them?

Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be "USSD messages" in an app recording notifications (com.evanhe.nhfree). There is a Wikipedia ...
3
votes
1answer
134 views

Why doesn't public or open WiFi use unique encryption for each client (like GSM)?

I wanted to ask a networking security question about open or public WiFi. This question is not a duplicate of Why isn't open WiFi encrypted? Reading about cellular networks I found out that cellular ...
0
votes
1answer
80 views

Detecting GSM activity [closed]

Is it possible to detect the GSM usage activity using SDR? I know that it's possible to do this using EMF meter, for example. What about SDR? Radius of the range: 30-40 meters P.S. ..GSM activity - ...
1
vote
0answers
69 views

Device location in LTE/GSM packets? [closed]

I'd like to know if any of the LTE or GSM packets have the GPS coordinates of a given device or any information about its geolocation. I mean, there must be a way to locate devices (maybe ...
1
vote
1answer
327 views

Can location/owner of mobile phone be identified

Let's say someone uses GSM network mobile phone to pursue his/her online activities on social networking platforms. The mobile phone is Android and all online activities are done through a VPN tunnel (...
4
votes
1answer
357 views

Why does cellular communication protocols use A5 or KASUMI and not AES or 3DES or RSA

Why does cellular communication protocols use A5 or KASUMI and not AES or 3DES or RSA? I have read that A5 is not that secure, is this the case? Are A5 or KASUMI used anywhere else? Why only in ...
1
vote
1answer
125 views

Android as GSM basestation

Is that possible to turn an Android GSM into a basestation? For example, if it can send and receive data then it can emulate that even if it's for an only device, if it was that simple there were no ...
-2
votes
1answer
160 views

What phone would be most private and what aspects to consider? [closed]

I want to change my phone and I would not use it for anything than calling and messaging. I would be happy to have phone the most private friendly and secure against any type of information withdraw ...
2
votes
1answer
2k views

Is it true that smartphones could get compromised via their baseband chip?

I read about this here. If I understand this correctly, it states that a smartphones could get compromised via it's baseband chip and it's (potentially) unsafe and closed-source firmware. I also ...
3
votes
2answers
407 views

Can SIM card be locked to the specific equipment?

I'm curious if SIM card can be "personalized" to operate only in the specified mobile equipment in addition to usual PIN security. So the SIM extracted from "legitimate" phone and placed into ...
3
votes
1answer
965 views

Why is callerID spoofing not possible when using short codes?

The question is already in the headline: Why is callerID spoofing not possible when the destination number is a short code? Here for example the answer to the question if callerID spoofing is still ...
-1
votes
2answers
1k views

IMSI catcher vs MiTM attack

On reading about IMSI catchers, it is almost always mentioned together with MITM attacks, i.e. as if IMSI catchers are same as MITM. But from my understanding, IMSI catchers and MITM are not the same ...
8
votes
1answer
808 views

GSM encryption suppression

The following papers explain that it is possible to suppress the encryption (or downgrade) in GSM using faked messages: https://pdfs.semanticscholar.org/3a86/4f867aadaea449623ddbf288c18815e7eb00.pdf ...
2
votes
1answer
594 views

create GMS base station with mobile devices [closed]

I would like to create my own GSM network (base station with mobile devices connected to each other) and having voice/sms services. Something like demonstrated here: https://evilsocket.net/2016/03/31/...
3
votes
1answer
3k views

Catch incoming SMS/Calls in a fake GSM Network

I am currently working on a Project where I am doing a downgrade attack from LTE to GSM. I am using OpenLTE and OpenBTS for creating the fake base stations. When the phone connects to the fake GSM ...
3
votes
1answer
147 views

How to perform RACH attacks on GSM mobile networks?

I am studying various vulnerabilities on GSM networks and would like to know what hardware and software are needed to test such vulnerabilities.
2
votes
1answer
231 views

What is the state of 3G data cryptography?

A client of my company is currently using a solution where they've invented a UDP protocol that communicated with no TLS over regular 3G in small embedded devices. Their cellular provider, KORE, ...
3
votes
1answer
124 views

As a mobile carrier, how do you defend against mobile attacks like Stingrays?

I would like to know what ways there are (if any) to defend against Stingrays and similar interception if you are a mobile carrier and have full control of the base stations and SIM cards? Can a SIM ...
1
vote
0answers
205 views

Does old SIM-cards have the same security as new one?

As I am using an old (10-15 years) SIM-card, I was asking myself if the hardware and software on the sim-card is equivalent to the newer sim-cards. Are the old-sim-cards (10-15years) the same as the ...
1
vote
1answer
252 views

Encryption and Decryption in WEP protocol [duplicate]

What is the role of Integrity Check Value in Wireless Equivalent Privacy? Why initialization Vector is sent as a clear message where as Integrity Check Value is sent as a cipher message?
5
votes
3answers
5k views

What information is being transmitted to the carrier when making a call on a GSM network?

I was wondering how carriers could track your calls and phone. I know that that there are a few things that are sent to the cell towers (and then to the carrier if it is logging the information) when ...
1
vote
0answers
253 views

PDU: SMS-DELIVER direct from a GSM Modem

My understanding of the SMS-DELIVER/SMS-SUBMIT is that when Bob wants to send a text on the GSM the following happens... Bob submits a request to send a short message to a short message service ...
1
vote
0answers
127 views

call spoofing online server

My friend has an app, in which he dials my number, and on my mobile, I see my own number calling me. He basically spoofs my number. He claims that there are online call services via which we can do ...
6
votes
4answers
7k views

Spoof coordinates sent by a GPS tracker device

Is there any way to change the GPS coordinates with fake ones? Eg. make a GPS tracker with a GSM modem for car tracking report fake coordinates for a short period of time before returning back to ...
2
votes
0answers
2k views

End-To-End encrypted calls over GSM transport (not data / VoIP)

As the issue stands, it should be (or could be) possible, to encrypt voice, that's being passed through GSM voice call in such way, so that it's end-to-end encrypted. Ideally in form similar to what ...
1
vote
1answer
8k views

Phone conversations being recorded and played back [duplicate]

Regarding below post from 2014, I have the exact same problem with every call I make to Lebanon. How do I stop this? Is it a bug? I have factory reset my phone and it's still happening. My wife ...
2
votes
1answer
98 views

GEA3 direction clarification

GEA3 (and 4) stands for GPRS Encryption Algorithm. It's specified in 3GPP TS 55.216 (at least used to, until some idiot forced them to hide it because of "export restrictions" or some crap like that). ...
5
votes
2answers
10k views

Difference between “Unknown” and “Hidden” Caller ID

I remember the times when I had an old Nokia phone as my main; there was some weird behaviour with Caller ID which was strange for me. When somebody with subscription to "Hide your number" service ...
3
votes
2answers
424 views

In mobile, can “Early Media” be sent from the phone?

Early Media, aka in-band information, is sent from the network to the calling phone in some circumstances, to provide alternative tones or extra information about the status of the call. In GSM this ...
2
votes
1answer
2k views

SS7 exploit on the wiretapping part

Wondering if there are info/source code/guide on the SS7 wiretapping part (SMS interception). I had a look on the track any mobile by a German researcher, and on PTsecurity about how the structure ...
0
votes
2answers
151 views

Best way to keep cell day to day phone calls private - is VOIP better?

This question is about preventing eavesdropping by hackers, thieves, or other smart people collecting information for shady purposes. Is it better to buy a smartphone and install a VOIP service on it ...
1
vote
2answers
2k views

Is there a way to uniquely identify a mobile device through packet sniffing?

I need to uniquely identify a mobile device using the "ping" packets that it transmits to cellular towers regularly, in an area of interest by installing a packet sniffer at that location? I only need ...
4
votes
1answer
3k views

Capturing text messages on the fly

Suppose your phone is not connected to any network. You are sitting in a cafeteria with 50 other people, everyone is communicating to each other via text messages. Is it possible through any device or ...
1
vote
1answer
94 views

Bought used computer with working GSM card [closed]

I recently bought a used computer from a company. They are buying lots of computers from big companies and they refurbish them for resale. Today I discovered that my computer has an installed SIM card....
0
votes
1answer
37 views

Would a recording of a complete GSM session provide a proof of authenticity?

Hypothetical question: suppose I had a OsmocomBB phone modified to record all transmission done over GSM including encryption keys used during the communication. If I made a call and recorded all data ...
1
vote
3answers
235 views

Can bad guys record phone conversations without the carrier's knowledge?

I know that, in most of the world, phone conversations are transmitted as digital data (whether frames in circuit switched protocols or packets). I know that several companies offer products which ...