how about quick switching between several [semi-stationary or briefcase carried] catchers (by analogy with an old Russia/USSR anti-aircraft tactic of quickly switching between several radars to avoid being detected and locked-in by an anti-radar missile :).
in a phased array that is also a Tx this can be partially compensated for with higher dBm output power from the radio itself, but that's not the usage scenario we're talking about here.
The manufacturer bears responsibility for misuse given the current state of the market; this is why markets exist, to trade information. If there is a genuine inability to communicate, then the market ceases to exist.
Open societies favor markets for a reason: communication, open lines of communication, and stable ones at that. There are all kinds of ways a computer virus can infect a system that is automatic; consider the possibility that a virus has infected an "autonomous" control system for a moving vehicle. A mechanical coupling usually makes this impossible, a steering wheel.
Verint engage gi2
The difference between an open source base station, and a homebuilt stingray in negligible.
While a grand or two's worth of radio hardware and however many weekends/evenings spent getting it all set up and the a software configured is _kind of_ expensive - it's effectively free at criminal org, corporate espionage, or state levels of action.
That's assuming you don't mind losing the transmitting hardware.
Then when you walk around, sit in the food court eating, or if the device is close to the outside, sit somewhere out of sight of the cameras with a strong wifi antennae and grab whatever data.
Unless they have some "free" wifi that the device could hop on to send it to some server somewhere.
Using that and / or 4g would make it easier to find the device and, of course, the person though.
Even more so in 2018 where an IMSI catcher is only relevant/useful if you downgrade the target to 2G operation, which requires some kind of additional interference/jamming.
Unless they are using "stingray" as some kind of generic term for "device you use to intercept mobile phones" and there are now 3G/LTE "stingrays".
This would all be so simple to deal with if phones just displayed an "unlocked" or "downgraded" warning when operating in 2G or unencrypted mode ...
https://www.unwiredinsight.com/2014/highlights-of-3gpp-relea...
https://www.google.ca/search?q=3gpp+release+12+imsi+catcher&...
Relevant: http://www.cryptomuseum.com/covert/bugs/selectric/index.htm
Disinformation is a powerful tool.
I'd assume if it was run from an embassy it's not risky at all actually - they can just tell the FCC to pound sand
By knowing how to hack, one knows how to defend. But knowing how to defend also imparts the knowledge to hack.
Quick edit: Whole US federal agencies have their own TSCM (technical surveillance countermeasures) staff entirely separate from the FCC. It is a job position at the dept of state. Evolved from bug detection and removal in the analog days to now encompass just about everything that can leak data.