Questions tagged [gsm]
a standard developed by the European Telecommunications Standards Institute for the second generation of digital cellular networks, used by mobile phones. It is the default global standard for mobile communications.
103
questions
0
votes
0
answers
29
views
Problems with phone [closed]
I have no admin control over my Samsung Android 13 phone.
My device reverts back to settings I change.
My location gets deleted.
I go on WhatsApp/TikToc etc and I have a profile I can actually click ...
0
votes
1
answer
44
views
Do 5G cellular kits than are connected to SBC, support encryption when the signal goes via them to the wifi?
I have seen around some 5G cellular kits that can be connected to SBC (Single Board Computers) in order to make a WIFI hotspot. From the one side, they provide 5G cellular connection and from the ...
- 256
0
votes
0
answers
124
views
eSIM/eUICC relay attacks
I'm trying to understand how the eSIM is protected against cloning. Here is the diagram from GSMA standard:
Now the ICT operator has its own security domain in which all the GSM related keys ...
- 39
0
votes
0
answers
42
views
Will enabling 4 only mode in a smartphone, prevent hackers from downgrading your connection to 3g/2g
My question is Will enabling 4 only mode in a smartphone, prevent hackers from downgrading your connection to 3g/2g through fake towers.
2
votes
0
answers
90
views
Are phone calls via WiFi VOIP encrypted by A5/1, A5/2, and A5/3?
I have enabled a function in my mobile phone, that uses my home Wi-Fi network to make calls when the cellular signal does not exist. As far as I know, the cellphone provider charges me as though I ...
- 256
2
votes
0
answers
266
views
Cell tower to cell phone encrypted communication
I have done some search here but I can't understand how phones and antennas share the keys used for encryption and decryption.
As far as I understand, mobile phones today use LTE i.e 4G (sometimes ...
- 25
0
votes
1
answer
119
views
How is the stream cipher key shared on GSM?
I read that phones encrypt communication (GSM as implemented in 2G,3G..) - particularly voice as SMS are unencrypted - using a stream cipher.
Symmetric Stream ciphers use the flip-flop machinery to ...
- 25
2
votes
1
answer
396
views
Reporting dual sim phone stolen [closed]
A burglar took my phone so I reported it to the police and phone company to blacklist it. They only asked for the first IMEI even though the phone has two IMEI since it can accomodate two SIMs. The ...
- 131
0
votes
1
answer
113
views
Can a wifi Access Point be reconfigured to receive other radio signals?
Say we have a remote transmitter that is not connected to a wifi router (neither wirelessly nor by cable), but which transmits information using electromagnetic waves. Examples include walkie-talkies, ...
- 1
1
vote
1
answer
130
views
Security assessment of a legacy SSL/TLS implementation on an IoT device
I am doing a security assessment on the communication security of a legacy IoT device. The objective is to assess and find security gaps in the current design/implementation.
The mode of assessment is ...
- 163
2
votes
1
answer
2k
views
Is inputting credit card numbers over a mobile phone secure?
I'm in the UK. In order to top up a pay-as-you-go SIM card, I had to first ring the mobile network to associate my bank card with the SIM before asking them to credit £10 to it (future top-ups don't ...
- 979
4
votes
3
answers
575
views
2-step authorization (using SMS) is less secure than having 2-factor disabled at all!
I've been thinking about this subject, and found paradoxical fact.
Having a service that has 2-step authorization using SMS might become more harmful and open vulnerability hole (read SMS can be ...
- 2,707
1
vote
1
answer
259
views
GSM encryption/decryption algorithms
I have seen around the internet devices like this: https://www.cryptophone.de/ and software that reinforce the security on cellphones. My question is simple, since the cellphones use A5/1, A5/2, A5/3 ...
- 256
0
votes
1
answer
90
views
A SIM module-based security system and radio signal interruptions
I would like to setup a simple alarm system using something like a Raspberry Pi or Arduino, some sensors, and a SIM module to send me an alarm when an intrusion is detected.
If I were dealing with an ...
- 983
2
votes
1
answer
1k
views
What is more safe: 3g/4g or public wifi?
The scenario is: John is out of home and, using his smartphone, he need to send some messages from Whatsapp, use Facebook's app and do some bank operations.
Since I have read this and this topics, I'...
- 758
1
vote
1
answer
33k
views
Getting called from hidden caller ID, what are the dangers if I answer?
My girlfriend has been getting calls on her iPhone from a hidden caller ID for several days in a row now. She has not answered any of them because we figured it can't be anything good if it's hidden.
...
- 13
1
vote
0
answers
851
views
What are the dangers of using 3g/4g in smartphones?
Since we should always avoid public networks, is there some sort of attack that intercept my online activity or steal passwords when I'm using 3g/4g? If exists, how I can protect myself from this type ...
- 758
0
votes
2
answers
225
views
Who: phone manufacturers, GSM operators or OS-creators (or whoever) should care that our mobiles do not to connect to rogue GSM towers?
Which one in this chain should be blamed for not taking care of security:
Phone manufacturers, GSM operators, SIM card manufacturers or OS systems (Android, iOS, etc..) to protect our phones from ...
- 2,707
1
vote
1
answer
842
views
Do mobile phones automatically connect to spoofed cellular tower antenna?
I was told that an attacker is able to create a fake cellular tower antenna imitator near your mobile phone, and your phone will automatically connect to it, whether that antenna has an encrypted ...
- 2,707
0
votes
2
answers
5k
views
View packets of whatsapp?
I start doing a research about what's actually delivered from some android applications (such as telegram or whatsapp) outside to the world.
I do it in the following mediums:
1. Wifi
2. GSM
It ...
- 525
1
vote
0
answers
940
views
How to retrieve the Ki value of sim card?
I was wondering is there any way to catch the Ki value in the SIM card by any coding? Is there a tool for that?
NOTE: Ki, only exist in SIM (Mobile Station) and BSC database. It won't be transmitted ...
- 171
6
votes
1
answer
565
views
GSM - Implementing Cipher Mode Command on YateBTS
I've been studying on Yate & YateBTS source code for a while, and I was wondering why there is no ciphering mode implementation in the source!?
I use the combination of BladeRF x40 FPGA and ...
- 171
0
votes
2
answers
527
views
How are USSD messages used and who could send them?
Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be "USSD messages" in an app recording notifications (com.evanhe.nhfree).
There is a Wikipedia ...
- 710
3
votes
1
answer
259
views
Why doesn't public or open WiFi use unique encryption for each client (like GSM)?
I wanted to ask a networking security question about open or public WiFi.
This question is not a duplicate of Why isn't open WiFi encrypted?
Reading about cellular networks I found out that cellular ...
- 43
0
votes
1
answer
135
views
Detecting GSM activity [closed]
Is it possible to detect the GSM usage activity using SDR? I know that it's possible to do this using EMF meter, for example. What about SDR?
Radius of the range: 30-40 meters
P.S. ..GSM activity - ...
- 103
1
vote
0
answers
122
views
Device location in LTE/GSM packets? [closed]
I'd like to know if any of the LTE or GSM packets have the GPS coordinates of a given device or any information about its geolocation. I mean, there must be a way to locate devices (maybe ...
- 111
1
vote
1
answer
403
views
Can location/owner of mobile phone be identified
Let's say someone uses GSM network mobile phone to pursue his/her online activities on social networking platforms. The mobile phone is Android and all online activities are done through a VPN tunnel (...
- 59
4
votes
1
answer
457
views
Why does cellular communication protocols use A5 or KASUMI and not AES or 3DES or RSA
Why does cellular communication protocols use A5 or KASUMI and not AES or 3DES or RSA?
I have read that A5 is not that secure, is this the case?
Are A5 or KASUMI used anywhere else? Why only in ...
- 41
1
vote
1
answer
200
views
Android as GSM basestation
Is that possible to turn an Android GSM into a basestation?
For example, if it can send and receive data then it can emulate that even if it's for an only device, if it was that simple there were no ...
- 13
-2
votes
1
answer
221
views
What phone would be most private and what aspects to consider? [closed]
I want to change my phone and I would not use it for anything than calling and messaging.
I would be happy to have phone the most private friendly and secure against any type of information withdraw ...
- 47
4
votes
1
answer
2k
views
Is it true that smartphones could get compromised via their baseband chip?
I read about this here.
If I understand this correctly, it states that a smartphones could get compromised via it's baseband chip and it's (potentially) unsafe and closed-source firmware.
I also ...
- 151
5
votes
2
answers
698
views
Can SIM card be locked to the specific equipment?
I'm curious if SIM card can be "personalized" to operate only in the specified mobile equipment in addition to usual PIN security. So the SIM extracted from "legitimate" phone and placed into ...
- 173
3
votes
1
answer
2k
views
Why is callerID spoofing not possible when using short codes?
The question is already in the headline:
Why is callerID spoofing not possible when the destination number is a short code?
Here for example the answer to the question if callerID spoofing is still ...
- 244
0
votes
2
answers
2k
views
IMSI catcher vs MiTM attack
On reading about IMSI catchers, it is almost always mentioned together with MITM attacks, i.e. as if IMSI catchers are same as MITM.
But from my understanding, IMSI catchers and MITM are not the same ...
- 525
10
votes
1
answer
1k
views
GSM encryption suppression
The following papers explain that it is possible to suppress the encryption (or downgrade) in GSM using faked messages:
https://pdfs.semanticscholar.org/3a86/4f867aadaea449623ddbf288c18815e7eb00.pdf
...
- 244
2
votes
1
answer
673
views
create GMS base station with mobile devices [closed]
I would like to create my own GSM network (base station with mobile devices connected to each other) and having voice/sms services.
Something like demonstrated here:
https://evilsocket.net/2016/03/31/...
- 525
3
votes
1
answer
3k
views
Catch incoming SMS/Calls in a fake GSM Network
I am currently working on a Project where I am doing a downgrade attack from LTE to GSM. I am using OpenLTE and OpenBTS for creating the fake base stations.
When the phone connects to the fake GSM ...
- 244
3
votes
1
answer
207
views
How to perform RACH attacks on GSM mobile networks?
I am studying various vulnerabilities on GSM networks and would like to know what hardware and software are needed to test such vulnerabilities.
- 31
2
votes
1
answer
292
views
What is the state of 3G data cryptography?
A client of my company is currently using a solution where they've invented a UDP protocol that communicated with no TLS over regular 3G in small embedded devices.
Their cellular provider, KORE, ...
- 121
3
votes
1
answer
168
views
As a mobile carrier, how do you defend against mobile attacks like Stingrays?
I would like to know what ways there are (if any) to defend against Stingrays and similar interception if you are a mobile carrier and have full control of the base stations and SIM cards?
Can a SIM ...
- 12.8k
1
vote
0
answers
289
views
Does old SIM-cards have the same security as new one?
As I am using an old (10-15 years) SIM-card, I was asking myself if the hardware and software on the sim-card is equivalent to the newer sim-cards.
Are the old-sim-cards (10-15years) the same as the ...
user110708
1
vote
1
answer
329
views
Encryption and Decryption in WEP protocol [duplicate]
What is the role of Integrity Check Value in Wireless Equivalent Privacy?
Why initialization Vector is sent as a clear message where as Integrity Check Value is sent as a cipher message?
- 11
5
votes
3
answers
6k
views
What information is being transmitted to the carrier when making a call on a GSM network?
I was wondering how carriers could track your calls and phone. I know that that there are a few things that are sent to the cell towers (and then to the carrier if it is logging the information) when ...
- 161
1
vote
0
answers
323
views
PDU: SMS-DELIVER direct from a GSM Modem
My understanding of the SMS-DELIVER/SMS-SUBMIT is that when Bob wants to send a text on the GSM the following happens...
Bob submits a request to send a short message to a short message service ...
- 11
1
vote
0
answers
187
views
call spoofing online server
My friend has an app, in which he dials my number, and on my mobile, I see my own number calling me. He basically spoofs my number. He claims that there are online call services via which we can do ...
- 11
6
votes
4
answers
8k
views
Spoof coordinates sent by a GPS tracker device
Is there any way to change the GPS coordinates with fake ones? Eg. make a GPS tracker with a GSM modem for car tracking report fake coordinates for a short period of time before returning back to ...
- 61
2
votes
0
answers
2k
views
End-To-End encrypted calls over GSM transport (not data / VoIP)
As the issue stands, it should be (or could be) possible, to encrypt voice, that's being passed through GSM voice call in such way, so that it's end-to-end encrypted.
Ideally in form similar to what ...
- 2,223
1
vote
1
answer
8k
views
Phone conversations being recorded and played back [duplicate]
Regarding below post from 2014, I have the exact same problem with every call I make to Lebanon.
How do I stop this? Is it a bug?
I have factory reset my phone and it's still happening.
My wife ...
- 21
2
votes
1
answer
185
views
GEA3 direction clarification
GEA3 (and 4) stands for GPRS Encryption Algorithm. It's specified in 3GPP TS 55.216 (at least used to, until some idiot forced them to hide it because of "export restrictions" or some crap like that). ...
- 140
5
votes
2
answers
10k
views
Difference between "Unknown" and "Hidden" Caller ID
I remember the times when I had an old Nokia phone as my main; there was some weird behaviour with Caller ID which was strange for me. When somebody with subscription to "Hide your number" service ...
- 133