News for hackers. Stuff that matters.
Re:Did 5G Kill the IMSI Catcher? by 1oooqooq on Sunday April 27, 2025 @02:28PM (#43814046)
if you pay the google tax for a pixel, you get a convenient 2G toggle.

if you don't have an extra $400-900 and buy a cheaper android, you get to dial ##4636## (hn screws asterisks, look it up) them go into phone info, select each sim radio and change the drop down (and hopefully you know all the standards by all names to make the right choice. hint 5G is NR there)

Re:Did 5G Kill the IMSI Catcher? by toast0 on Sunday April 27, 2025 @02:47PM (#43814193)
There's a convenient toggle on my Moto G Stylus 5G 2023, if not a convenient name. In the carrier settings right next to allow 5G. Can't easily disable 3G or LTE though. IIRC, LTE is also mutually authenticates, but if we're talking about passive catching and the ismi is sent in the clear as the article says, then that doesn't eliminate passive catching. I'm not sure about 3G, I thought it wasn't mutual auth either.
Re:Did 5G Kill the IMSI Catcher? by lxgr on Sunday April 27, 2025 @04:18PM (#43814784)
Definitely, mutual authentication and (not) using long-term identifiers in the initial attach request are largely orthogonal concerns.

I believe even 3G supports mutual authentication (at least if the SIM supports it, i.e. it’s not a very old GSM only one), but anonymized identifiers only appeared with 5G.

Re:Did 5G Kill the IMSI Catcher? by 1oooqooq on Monday April 28, 2025 @11:02AM (#43822252)
wait. which market? never seen a Motorola with the "disable 2G" toggle!

and yes, that only prevents the lower denominator which uses downgrade, which is the vast majority everywhere.

Re:Did 5G Kill the IMSI Catcher? by toast0 on Monday April 28, 2025 @05:17PM (#43826215)
US market, purchased direct from Motorola.
Re:Did 5G Kill the IMSI Catcher? by Bender on Sunday April 27, 2025 @03:47PM (#43814579)
One can backslash escape the asterisks. **

    \*\*
Re:Did 5G Kill the IMSI Catcher? by 1oooqooq on Monday April 28, 2025 @11:06AM (#43822312)
kinda of information that would be very useful displayed when you're entering a comment. it's not like i work here...
Re:Did 5G Kill the IMSI Catcher? by Bender on Monday April 28, 2025 @11:45AM (#43822765)
That and all the things listed in this repo [1] not my repo.

[1] - https://github.com/minimaxir/hacker-news-undocumented

Re:Did 5G Kill the IMSI Catcher? by JadeNB on Sunday April 27, 2025 @06:31PM (#43815668)
> ##4636## (hn screws asterisks, look it up)

You can include asterisks if you escape them, like \*: *#*#4636#*#*.

Re:Did 5G Kill the IMSI Catcher? by jeroenhd on Monday April 28, 2025 @03:45AM (#43818682)
The 2G toggle can also be found in some other phones, but not every phone manufacturer has support for configuring their modems like that or has bothered to keep the setting in their settings app overhaul.

I know that setting, but I'm not entirely sure if that controls a preference or a mandatory cell config, and if it will prevent downgrades from the network side or not.

Some manufacturers and most custom ROMs also seem to offer that option without a dial code, but I haven't found any documentation about that feature yet to be sure it actually forces the modem configuration. I've found mentions online about this setting being changed without user interaction, so there seems to be a mechanism on some phones (carrier-branded ones maybe?) that alters this config.

Re:Did 5G Kill the IMSI Catcher? by 1oooqooq on Monday April 28, 2025 @11:05AM (#43822297)
every modem have to have that control. and you can access it on every model I've ever seen with the code i shared. i think it might be a requirement for some of the regulations they plaster stickers for.

having the ui it not is a balance between playing nice with over reaching law enforcement and enterprise clients.

Re:Did 5G Kill the IMSI Catcher? by elric on Monday April 28, 2025 @07:47AM (#43820258)
Is there a name for those ##number## codes? It's been years since I had to use one of them to fix some random issue on a phone.
Re:Did 5G Kill the IMSI Catcher? by taneliv on Monday April 28, 2025 @10:59AM (#43822221)
USSD and MMI, see for example https://en.wikipedia.org/wiki/Unstructured_Supplementary_Ser... . On a quick glance the references did not seem to list what codes are usually available, so just search "ussd code list" or similar.