Questions tagged [gsm]

a standard developed by the European Telecommunications Standards Institute for the second generation of digital cellular networks, used by mobile phones. It is the default global standard for mobile communications.

Filter by
Sorted by
Tagged with
0
votes
1answer
29 views

A SIM module-based security system and radio signal interruptions

I would like to setup a simple alarm system using something like a Raspberry Pi or Arduino, some sensors, and a SIM module to send me an alarm when an intrusion is detected. If I were dealing with an ...
1
vote
1answer
203 views

What is more safe: 3g/4g or public wifi?

The scenario is: John is out of home and, using his smartphone, he need to send some messages from Whatsapp, use Facebook's app and do some bank operations. Since I have read this and this topics, I'...
1
vote
1answer
173 views

Getting called from hidden caller ID, what are the dangers if I answer?

My girlfriend has been getting calls on her iPhone from a hidden caller ID for several days in a row now. She has not answered any of them because we figured it can't be anything good if it's hidden. ...
0
votes
0answers
252 views

What are the dangers of using 3g/4g in smartphones?

Since we should always avoid public networks, is there some sort of attack that intercept my online activity or steal passwords when I'm using 3g/4g? If exists, how I can protect myself from this type ...
0
votes
2answers
126 views

Who: phone manufacturers, GSM operators or OS-creators (or whoever) should care that our mobiles do not to connect to rogue GSM towers?

Which one in this chain should be blamed for not taking care of security: Phone manufacturers, GSM operators, SIM card manufacturers or OS systems (Android, iOS, etc..) to protect our phones from ...
1
vote
1answer
195 views

Do mobile phones automatically connect to spoofed cellular tower antenna?

I was told that an attacker is able to create a fake cellular tower antenna imitator near your mobile phone, and your phone will automatically connect to it, whether that antenna has an encrypted ...
0
votes
2answers
1k views

View packets of whatsapp?

I start doing a research about what's actually delivered from some android applications (such as telegram or whatsapp) outside to the world. I do it in the following mediums: 1. Wifi 2. GSM It ...
1
vote
0answers
60 views

How to retrieve the Ki value of sim card?

I was wondering is there any way to catch the Ki value in the SIM card by any coding? Is there a tool for that? NOTE: Ki, only exist in SIM (Mobile Station) and BSC database. It won't be transmitted ...
4
votes
1answer
166 views

GSM - Implementing Cipher Mode Command on YateBTS

I've been studying on Yate & YateBTS source code for a while, and I was wondering why there is no ciphering mode implementation in the source!? I use the combination of BladeRF x40 FPGA and ...
0
votes
1answer
110 views

How are USSD messages used and who could send them?

Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be "USSD messages" in an app recording notifications (com.evanhe.nhfree). There is a Wikipedia ...
3
votes
1answer
87 views

Why doesn't public or open WiFi use unique encryption for each client (like GSM)?

I wanted to ask a networking security question about open or public WiFi. This question is not a duplicate of Why isn't open WiFi encrypted? Reading about cellular networks I found out that cellular ...
0
votes
1answer
60 views

Detecting GSM activity [closed]

Is it possible to detect the GSM usage activity using SDR? I know that it's possible to do this using EMF meter, for example. What about SDR? Radius of the range: 30-40 meters P.S. ..GSM activity - ...
1
vote
0answers
64 views

Device location in LTE/GSM packets? [closed]

I'd like to know if any of the LTE or GSM packets have the GPS coordinates of a given device or any information about its geolocation. I mean, there must be a way to locate devices (maybe ...
1
vote
1answer
266 views

Can location/owner of mobile phone be identified

Let's say someone uses GSM network mobile phone to pursue his/her online activities on social networking platforms. The mobile phone is Android and all online activities are done through a VPN tunnel (...
4
votes
1answer
263 views

Why does cellular communication protocols use A5 or KASUMI and not AES or 3DES or RSA

Why does cellular communication protocols use A5 or KASUMI and not AES or 3DES or RSA? I have read that A5 is not that secure, is this the case? Are A5 or KASUMI used anywhere else? Why only in ...
1
vote
1answer
88 views

Android as GSM basestation

Is that possible to turn an Android GSM into a basestation? For example, if it can send and receive data then it can emulate that even if it's for an only device, if it was that simple there were no ...
-2
votes
1answer
128 views

What phone would be most private and what aspects to consider? [closed]

I want to change my phone and I would not use it for anything than calling and messaging. I would be happy to have phone the most private friendly and secure against any type of information withdraw ...
2
votes
1answer
412 views

Is it true that smartphones could get compromised via their baseband chip?

I read about this here. If I understand this correctly, it states that a smartphones could get compromised via it's baseband chip and it's (potentially) unsafe and closed-source firmware. I also ...
3
votes
1answer
256 views

Can SIM card be locked to the specific equipment?

I'm curious if SIM card can be "personalized" to operate only in the specified mobile equipment in addition to usual PIN security. So the SIM extracted from "legitimate" phone and placed into ...
3
votes
1answer
528 views

Why is callerID spoofing not possible when using short codes?

The question is already in the headline: Why is callerID spoofing not possible when the destination number is a short code? Here for example the answer to the question if callerID spoofing is still ...
0
votes
2answers
1k views

IMSI catcher vs MiTM attack

On reading about IMSI catchers, it is almost always mentioned together with MITM attacks, i.e. as if IMSI catchers are same as MITM. But from my understanding, IMSI catchers and MITM are not the same ...
8
votes
1answer
567 views

GSM encryption suppression

The following papers explain that it is possible to suppress the encryption (or downgrade) in GSM using faked messages: https://pdfs.semanticscholar.org/3a86/4f867aadaea449623ddbf288c18815e7eb00.pdf ...
2
votes
1answer
492 views

create GMS base station with mobile devices [closed]

I would like to create my own GSM network (base station with mobile devices connected to each other) and having voice/sms services. Something like demonstrated here: https://evilsocket.net/2016/03/31/...
3
votes
1answer
2k views

Catch incoming SMS/Calls in a fake GSM Network

I am currently working on a Project where I am doing a downgrade attack from LTE to GSM. I am using OpenLTE and OpenBTS for creating the fake base stations. When the phone connects to the fake GSM ...
3
votes
1answer
134 views

How to perform RACH attacks on GSM mobile networks?

I am studying various vulnerabilities on GSM networks and would like to know what hardware and software are needed to test such vulnerabilities.
2
votes
1answer
201 views

What is the state of 3G data cryptography?

A client of my company is currently using a solution where they've invented a UDP protocol that communicated with no TLS over regular 3G in small embedded devices. Their cellular provider, KORE, ...
3
votes
1answer
113 views

As a mobile carrier, how do you defend against mobile attacks like Stingrays?

I would like to know what ways there are (if any) to defend against Stingrays and similar interception if you are a mobile carrier and have full control of the base stations and SIM cards? Can a SIM ...
1
vote
0answers
170 views

Does old SIM-cards have the same security as new one?

As I am using an old (10-15 years) SIM-card, I was asking myself if the hardware and software on the sim-card is equivalent to the newer sim-cards. Are the old-sim-cards (10-15years) the same as the ...
1
vote
1answer
205 views

Encryption and Decryption in WEP protocol [duplicate]

What is the role of Integrity Check Value in Wireless Equivalent Privacy? Why initialization Vector is sent as a clear message where as Integrity Check Value is sent as a cipher message?
6
votes
3answers
3k views

What information is being transmitted to the carrier when making a call on a GSM network?

I was wondering how carriers could track your calls and phone. I know that that there are a few things that are sent to the cell towers (and then to the carrier if it is logging the information) when ...
1
vote
0answers
223 views

PDU: SMS-DELIVER direct from a GSM Modem

My understanding of the SMS-DELIVER/SMS-SUBMIT is that when Bob wants to send a text on the GSM the following happens... Bob submits a request to send a short message to a short message service ...
1
vote
0answers
120 views

call spoofing online server

My friend has an app, in which he dials my number, and on my mobile, I see my own number calling me. He basically spoofs my number. He claims that there are online call services via which we can do ...
6
votes
3answers
5k views

Spoof coordinates sent by a GPS tracker device

Is there any way to change the GPS coordinates with fake ones? Eg. make a GPS tracker with a GSM modem for car tracking report fake coordinates for a short period of time before returning back to ...
1
vote
0answers
1k views

End-To-End encrypted calls over GSM transport (not data / VoIP)

As the issue stands, it should be (or could be) possible, to encrypt voice, that's being passed through GSM voice call in such way, so that it's end-to-end encrypted. Ideally in form similar to what ...
1
vote
1answer
5k views

Phone conversations being recorded and played back [duplicate]

Regarding below post from 2014, I have the exact same problem with every call I make to Lebanon. How do I stop this? Is it a bug? I have factory reset my phone and it's still happening. My wife ...
2
votes
1answer
59 views

GEA3 direction clarification

GEA3 (and 4) stands for GPRS Encryption Algorithm. It's specified in 3GPP TS 55.216 (at least used to, until some idiot forced them to hide it because of "export restrictions" or some crap like that). ...
5
votes
2answers
8k views

Difference between “Unknown” and “Hidden” Caller ID

I remember the times when I had an old Nokia phone as my main; there was some weird behaviour with Caller ID which was strange for me. When somebody with subscription to "Hide your number" service ...
3
votes
2answers
346 views

In mobile, can “Early Media” be sent from the phone?

Early Media, aka in-band information, is sent from the network to the calling phone in some circumstances, to provide alternative tones or extra information about the status of the call. In GSM this ...
2
votes
1answer
1k views

SS7 exploit on the wiretapping part

Wondering if there are info/source code/guide on the SS7 wiretapping part (SMS interception). I had a look on the track any mobile by a German researcher, and on PTsecurity about how the structure ...
0
votes
2answers
111 views

Best way to keep cell day to day phone calls private - is VOIP better?

This question is about preventing eavesdropping by hackers, thieves, or other smart people collecting information for shady purposes. Is it better to buy a smartphone and install a VOIP service on it ...
1
vote
2answers
1k views

Is there a way to uniquely identify a mobile device through packet sniffing?

I need to uniquely identify a mobile device using the "ping" packets that it transmits to cellular towers regularly, in an area of interest by installing a packet sniffer at that location? I only need ...
2
votes
1answer
2k views

Capturing text messages on the fly

Suppose your phone is not connected to any network. You are sitting in a cafeteria with 50 other people, everyone is communicating to each other via text messages. Is it possible through any device or ...
1
vote
1answer
91 views

Bought used computer with working GSM card [closed]

I recently bought a used computer from a company. They are buying lots of computers from big companies and they refurbish them for resale. Today I discovered that my computer has an installed SIM card....
0
votes
1answer
32 views

Would a recording of a complete GSM session provide a proof of authenticity?

Hypothetical question: suppose I had a OsmocomBB phone modified to record all transmission done over GSM including encryption keys used during the communication. If I made a call and recorded all data ...
1
vote
3answers
218 views

Can bad guys record phone conversations without the carrier's knowledge?

I know that, in most of the world, phone conversations are transmitted as digital data (whether frames in circuit switched protocols or packets). I know that several companies offer products which ...
9
votes
1answer
1k views

Hacking/Sniffing/recording GSM like Karsten Nohl

For a course at college, I wanted to reproduce the attack on GSM shown in this video by Karsten Nohl: https://www.youtube.com/watch?v=0hjn-BP8nro. From what I understand he used an USRP radio to ...
-1
votes
1answer
160 views

How can I know if any cell phones other than a given set are turned on in the nearby area?

I am searching for a solution to identify phones simply by the signals it emits. Imagine a signal receiver in a room, then I want to know which people are using phones nearby. I don't care what they ...
1
vote
1answer
166 views

Is originating number tied to an SMS from a mobile phone?

I've been working with an SDR (software-defined radio) as part of a computer security class project. We've been wondering if, let's say a mobile phone associates with the SDR (which is operating as a ...
2
votes
3answers
3k views

Is it possible to jam just one persons Cellphone but keep all other working?

I know devices that are jamming everyones Cellphones in a radius of X meters but this is only distracting the frequency cellphones work on. This is not very handy. Is it be possible to jam just one ...
10
votes
1answer
6k views

Cellular encryption algorithms currently in use globally

I have been doing research on the available encryption algorithms used by commercial mobile providers worldwide, and would like to know if the following list is complete: Algorithms for voice ...