News for hackers. Stuff that matters.
Re:EFF: Rayhunter by aerostable_slug on Thursday March 06, 2025 @03:51PM (#43284961)
How would one test this device to know that it works? It would seem actual cell site simulators would be rare in the wild for many HN readers.
Re:EFF: Rayhunter by edm0nd on Thursday March 06, 2025 @05:08PM (#43285550)
You could bring it to a large festival or even a protest. Law enforcement deploys them all the time. I found one using SnoopSnitch on an Android phone while at a large festival here in Louisiana.
Re:EFF: Rayhunter by rtkwe on Friday March 07, 2025 @11:09AM (#43291327)
Does that work by comparing known cell sites to found cells sites? I know some StingRay detectors use that method and it's prone to false positives around large events where mobile carriers or 3rd parties bring in legitimate temporary cell sites to improve cell service at the venue and provide more capacity.
Re:EFF: Rayhunter by alienthrowaway on Thursday March 06, 2025 @10:39PM (#43287226)
Visit Washington, DC.
Re:EFF: Rayhunter by d4mi3n on Thursday March 06, 2025 @10:53PM (#43287276)
They are quite common in some municipalities. There are folks who talk about this at length in cybersecurity circles every year at conferences, it’s been an issue for a long while and the scope of the problem continues to grow.

The EFF also writes in the topic from time to time. See: https://www.eff.org/deeplinks/2024/06/next-generation-cell-s...

Re:EFF: Rayhunter by toomuchtodo on Friday March 07, 2025 @12:17AM (#43287529)
Is it possible to detect these using SDR networks?

https://www.rtl-sdr.com/kiwisdr-tdoa-direction-finding-now-f...

Re:EFF: Rayhunter by d4mi3n on Friday March 07, 2025 @05:21PM (#43295431)
I have no idea. I'm not an RF expert, but I'll ask this the next time I run into one. Great question!
Re:EFF: Rayhunter by evandrofisico on Friday March 07, 2025 @09:24AM (#43290407)
Here in Brazil criminals are starting to use those to send phishing SMS, exploiting our ubiquitous mobile payment system (pix) or pretending to be a second authentication factor for banks.