News for hackers. Stuff that matters.
Re:The forgotten war on beepers by karma_pharmer on Wednesday April 17, 2024 @05:14PM (#40070092)
It really upsets me that the VHF pager networks were shut down.

VHF pagers were the last way you could recieve notifications without having to offer up your location to surveillance. All satellite pagers require transmit-before-receive, and of course LTE requires that plus actively cooperating with the towers' triangulation of the receiver.

VHF POCSAG over large urban areas is something we never should have let go of.

Re:The forgotten war on beepers by ale42 on Wednesday April 17, 2024 @05:28PM (#40070232)
Plus, VHF signals can get where no LTE or satellite can arrive, even if you are two floors underground. Downside is that anybody can read POCSAG, especially nowadays with inexpensive SDR receivers...
Re:The forgotten war on beepers by karma_pharmer on Wednesday April 17, 2024 @11:33PM (#40072704)
Nothing prevents you from sending encrypted payloads over POCSAG.
Re:The forgotten war on beepers by ale42 on Thursday April 18, 2024 @03:25AM (#40073828)
Sure, you can send whatever you want... but is there any off-the-shelf solution that can display encrypted messages?
Re:The forgotten war on beepers by kotaKat on Thursday April 18, 2024 @09:39AM (#40076103)
There are a bunch of POCSAG paging products that support their own flavors of encryption. Unication has a few that support AES encrypted messaging. You keyload it at the same time as the rest of the pager setup.

https://www.unication.com/alpha-pagers

And here's LRS's implementation of encryption on POCSAG:

https://paging-systems.readme.io/docs/encryption

Re:The forgotten war on beepers by ale42 on Sunday April 21, 2024 @05:23PM (#40109367)
Nice to see, thanks!
Re:The forgotten war on beepers by theodric on Wednesday April 17, 2024 @08:02PM (#40071486)
Hams still have and use them.[1]

I'm not a ham, because I don't want to hang out with self-appointed cops, so I got a new Chinese pager made up with a center frequency of 433.5MHz (ISM, unlicensed), then configured it to work with a Pi-Star rig radiating well under the EU/Irish legal power limit, and receive messages infrequently enough not to run afoul of duty cycle limits. Because I know there's some ham who's just salivating to track me down and quote the rule book to me, and I want to deny him (it's always a him) that pleasure. It reaches all the way to the far end of my farm!

You can get traditional alphanumeric belt loop pagers or snazzy modern wristwatch pages these days. Check AliExpress.

[1] https://hampager.de/#/

Re:The forgotten war on beepers by cdchn on Wednesday April 17, 2024 @08:40PM (#40071754)
>I'm not a ham, because I don't want to hang out with self-appointed cops

Hams do have a "Whacker" problem. General Boomer mentality scares away a lot of new Hams as well.

Re:The forgotten war on beepers by 7thpower on Thursday April 18, 2024 @05:32AM (#40074423)
I’m not sure I understand the bit about cops. I’m interested though, please do tell.
Re:The forgotten war on beepers by theodric on Friday April 19, 2024 @05:16PM (#40091992)
The tedious sort of people who like to make it their mission in life to quote the rulebook as often as possible, frequently incorrectly, in an effort to assert their authority and dominance. I want nothing to do with them.
Re:The forgotten war on beepers by KennyBlanken on Wednesday April 17, 2024 @06:57PM (#40070959)
"VHF pagers were the last way you could recieve notifications without having to offer up your location to surveillance"

...and instead anyone in your city can read every single text message with a trivial amount of hardware?

Re:The forgotten war on beepers by oxygen_crisis on Wednesday April 17, 2024 @07:00PM (#40070982)
There's nothing wrong with open communication when everyone understands that it's open and treats it accordingly.
Re:The forgotten war on beepers by karma_pharmer on Wednesday April 17, 2024 @11:42PM (#40072741)
They can read my AES-encrypted ciphertext all day long and I don't care.

You can even buy two-way pagers that transmit with AES-128 encryption. Hospitals have to use this due to HIPAA:

https://www.spok.com/blog/standard-or-encrypted-pagers-whats...

I think you're confusing commercial pager services with Ham radio.

Re:The forgotten war on beepers by prmoustache on Thursday April 18, 2024 @03:27AM (#40073837)
Usually pagers were used to ask people to call back so I don't think that is a big issue. It is like shooting at someone you recognize far away in the street so he can look back and meet you. Everybody will hear that but not the actual content of the conversation afterwards.
[dead]
Re:The forgotten war on beepers by caseyy on Wednesday April 17, 2024 @07:21PM (#40071166)
Yes, there are many reasonable arguments. For example: your data is sold to third parties you don't know, and they use it against you or in unethical ways.

For example, visiting a mental health clinic might mean your car insurance rates go up, or Facebook adjusts their algorithm to cause you more distress and hook you more, or your credit rating goes down. Objectively, you are worse off because you were tracked.

See a recent example with BetterHelp, where they sold their patients' history of mental health medications, suicide attempts, depression, and a few other things that were on an ingestion form to social media companies. After promising on the very form where they collected this data that they wouldn't do it. That is the reality of the situation. You turn into a product when you're tracked.

Re:The forgotten war on beepers by 2024throwaway on Wednesday April 17, 2024 @07:25PM (#40071192)
Citations needed. These sound like wild conspiracy theories.
Re:The forgotten war on beepers by mrWiz on Wednesday April 17, 2024 @07:41PM (#40071312)
Neither of those links demonstrate mishandling of location data collected via cell phone. They’re just regular misuse of data that would be possible even if nobody involved was carrying a phone.
Re:The forgotten war on beepers by caseyy on Wednesday April 17, 2024 @07:44PM (#40071335)
Well, I'm sure you understand that there is a broader theme here, given how central it has been to public discourse and lawmaking in the last several years.

But should that not be the case, here's data collected via cell-phone that was mishandled - https://eu.azcentral.com/story/news/local/southwest-valley/2....

Re:The forgotten war on beepers by vel0city on Wednesday April 17, 2024 @08:39PM (#40071743)
But those VHF pagers transmitted all the rest of your data in the clear unprotected, it just didn't have your location or any knowledge if you received the message.
Re:The forgotten war on beepers by caseyy on Thursday April 18, 2024 @12:18AM (#40072901)
Well, you are right. But the message as well as the medium can be privacy-respecting. Even with encrypted messages, a lot can be extracted from metadata that is a part of the medium.

These days pager tech has advanced to support public-private key encryption for messages. So the messages being in plain text is less of a concern.

Re:The forgotten war on beepers by sophacles on Wednesday April 17, 2024 @08:10PM (#40071547)
I'm sure you're right. They'll keep our boring, unimportant location data safe. Just like they do with our financial data, or account info, and other such important information.

Nothing bad ever happens when people's info is leaked like that anyway right?

BTW I need to confirm some data I bought - what are your CVVs and SSN again? It's fine to post it publically here, nothing bad happens and it's already been leaked 100s of times at this point.

Re:The forgotten war on beepers by 2024throwaway on Wednesday April 17, 2024 @08:22PM (#40071636)
Unironically this. I treat my SSN as public data. CVVs might as well be too, I can just dispute the charge.
Re:The forgotten war on beepers by DisgracePlacard on Wednesday April 17, 2024 @08:13PM (#40071569)
https://www.washingtonpost.com/world/2024/04/05/israel-idf-l...

Israel used phone location data to target and kill Palestinians, with a sub-90% accuracy rate, supposedly. Probably not a big concern right now in America, but it could always turn into one. So I think it'd be good if this wasn't a possibility. Better safe than sorry.

Re:The forgotten war on beepers by kortilla on Wednesday April 17, 2024 @07:27PM (#40071206)
The cell phone company and anyone who offers them money.
Re:The forgotten war on beepers by 2024throwaway on Wednesday April 17, 2024 @07:32PM (#40071253)
I’ll tell you I was at Costco for free.
Re:The forgotten war on beepers by kortilla on Sunday April 21, 2024 @11:18AM (#40106416)
And when it’s an abortion clinic you went to in a neighboring state because it’s illegal where you live? How about when it shows you did something that could get you prosecuted in your home country?
Re:The forgotten war on beepers by MatthiasPortzel on Wednesday April 17, 2024 @07:20PM (#40071159)
Because the cell phone company logs that information and will turn it over to law enforcement without a warrant?
Re:The forgotten war on beepers by 2024throwaway on Wednesday April 17, 2024 @07:32PM (#40071250)
They can know I was at Costco too. I’m fine with that.
Re:The forgotten war on beepers by caseyy on Wednesday April 17, 2024 @07:38PM (#40071294)
Surely you're not saying you're fine with your location data leading to wrongful imprisonment, which is what sometimes happens if companies hoard this data?

https://eu.azcentral.com/story/news/local/southwest-valley/2...

Re:The forgotten war on beepers by 2024throwaway on Wednesday April 17, 2024 @08:23PM (#40071641)
If I go to prison for being at Costco, that was one WILD trip to Costco.
Re:The forgotten war on beepers by ctrw on Wednesday April 17, 2024 @07:25PM (#40071189)
If you have done nothing wrong you have nothing to hide.

Just ask the animal libratio armys fringes who think that the death penalty is a reasonable response to eating meat.

Re:The forgotten war on beepers by 2024throwaway on Wednesday April 17, 2024 @07:26PM (#40071198)
So you have no reasonable argument, got it.
Re:The forgotten war on beepers by ctrw on Wednesday April 17, 2024 @07:55PM (#40071426)
If you don't see why terrorists getting your location is a bad thing thing... Well it's a problem that will solve itself eventually.
Re:The forgotten war on beepers by 2024throwaway on Wednesday April 17, 2024 @08:24PM (#40071648)
Tell the terrorists I’ll be at Costco, eating a whole rotisserie chicken in the parking lot while crying.
Re:The forgotten war on beepers by wizzwizz4 on Wednesday April 17, 2024 @07:49PM (#40071390)
Re:The forgotten war on beepers by 2024throwaway on Wednesday April 17, 2024 @08:24PM (#40071649)
Costco doesn’t sell sex toys. Yet.
Re:The forgotten war on beepers by wkat4242 on Wednesday April 17, 2024 @08:59PM (#40071883)
Yes!! This. I would totally carry a pager if the network still existed. Not all the time, but just sometimes when I'd like to feel free.

Ps there is still the iridium paging service which is one way and is not transmit before receive. But they want to get rid of it and stopped selling hardware. It's really hard to find now second hand.

Re:The forgotten war on beepers by karma_pharmer on Wednesday April 17, 2024 @11:34PM (#40072714)
No, iridium is definitely transmit-before-receive.

The only thing you can receive without transmitting is a one-bit "message waiting" indicator, so you don't waste uplink bandwidth polling the satellite unless there's something there for you. Basically the satellite broadcasts a list of terminals that have messages waiting for them. I recall there being some kind of bloom filter, so technically it's less than one bit.

You can't get anything else downstream unless you transmit first to ask for it. Also the only way to clear the "message waiting" bit is by transmitting to the satellite, so you can't even try to encode a message by flipping that bit on and off.

Re:The forgotten war on beepers by lxgr on Wednesday April 17, 2024 @11:58PM (#40072813)
No, the original Iridium paging service really is (was?) one way.

You had to manually update your paging location by dialing some number or by using a web interface when moving significantly, or link an Iridium phone to your pager, which would then automatically update the paging area (MDA) every time you made a call.

What you mean is probably Iridium SBD, but that’s a different, bidirectional service (also used for pager-like devices these days).

Re:The forgotten war on beepers by karma_pharmer on Thursday April 18, 2024 @05:34AM (#40074433)
Yes, Iridium SBD requires transmitting before you can receive.

I did not know about Global Data Burst; I think that's what you're referring to. Holy cow it's expensive though, although I guess it has to be since you're using a lot more bandwidth*footprint. Like $6.00 per message per delivery area expensive. And they're kinda vague on how big a "delivery area" is.

https://apollosat.com/featured/iridium-gdb-pager/

Re:The forgotten war on beepers by lxgr on Thursday April 18, 2024 @08:15AM (#40075395)
No, I’m referring to the Iridium pager, which is just its own service and has been around longer than SBD, I believe. Messages were (are?) free to send on top of a monthly flat subscription rate per pager.

GDB seems to be a successor to that, though.

Re:The forgotten war on beepers by kotaKat on Thursday April 18, 2024 @09:43AM (#40076156)
GDB is just a branding for their own flavor of what they're selling which is Iridium Burst, which also appear to run on the 9602/9603 SBD modules, so... maybe Iridium Burst is just spicier Iridium SBD?

https://www.iridium.com/services/iridium-burst/

Re:The forgotten war on beepers by lxgr on Thursday April 18, 2024 @10:33AM (#40076711)
SBD is bidirectional unicast (and mandatorily so; as you say, SBD can't transmit to devices before they initiate a mailbox exchange, with the exception of a "message waiting" indicator.

Iridium Burst seems to be multicast-capable, and optionally bidirectional or unidirectional, so "spicier SBD" makes sense!

But their paging service was definitely unidirectional and unicast. Here's an old talk on decoding the signal, if you're curious: https://media.ccc.de/v/31c3_-_6236_-_en_-_saal_1_-_201412281...

Re:The forgotten war on beepers by kotaKat on Friday April 19, 2024 @08:36AM (#40086049)
Yep -- actually contributed an NAL Shout Nano so they had additional protocol decoding on top of SBD ;)
Re:The forgotten war on beepers by cubix on Wednesday April 17, 2024 @09:40PM (#40072100)
I was carrying a pager as late as 2009 because a customer's data center was two stories underground in one of the older tower blocks in downtown Toronto.
Re:The forgotten war on beepers by wkat4242 on Friday April 19, 2024 @03:42AM (#40084318)
Yes it is amazing how good the coverage was.

I had one and I've only been outside the coverage area once, when I went on cave trip. I noticed my pager said OUTRANGE which was something I had never seen any other time. The coverage really was phenomenal due to the low frequency (159Mhz).

Re:The forgotten war on beepers by filleokus on Thursday April 18, 2024 @09:23AM (#40075937)
In Sweden the "minicall" network (POCSAG, ≈ 169 Mhz) is still active and in use by some niche industries.

I know of it being used for fairly mundane things like Grafana Alerts (or the equivalent), but in circumstances where you need to reach people in areas where cellphones are forbidden or lack coverage (like security sensitive data centers for example).

Snooping on that frequency band in ≈Stockholm it also seems to be quite actively used for sending machine-to-machine commands in some industries, perhaps not always that stringently authenticated...

Which I guess is a downside though, you need to take proper precautions in the "application layer" since the network is completely open.