News for hackers. Stuff that matters.

A comment on Samsung, Nokia say they don’t know how to track a powered-down phone. Parent comment

Re:Samsung, Nokia say they don’t know how to track a powered... by dobbsbob on Tuesday November 12, 2013 @09:01AM (#6717830)
Cryptophone GSMK has a 'baseband firewall' that will shut down the stack if its continuously active without the application cpu also being active, meaning shenanigans are afoot like being spammed with type0 SMS to track you silently. They test it by walking into airports which all have some kind of national security baseband attack going on
[ Parent | on HN ]
Re:Samsung, Nokia say they don’t know how to track a powered... by revelation on Tuesday November 12, 2013 @01:32PM (#6719765)
That's nice, but it is one hell of a side channel :)

Some people have been trying to implement detection for e.g. silent SMS or IMSI catchers in osmocombb (the first open source baseband), see [1], but there doesn't seem to be any recent progress.

1: https://opensource.srlabs.de/projects/catcher/wiki

[ Parent | on HN ]
Re:Samsung, Nokia say they don’t know how to track a powered... by dobbsbob on Tuesday November 12, 2013 @02:19PM (#6720191)
I guess end to end encryption with Redphone or Ostel would defeat stingray/imsi catchers but no idea with type0 sms spam tracking. Use a faraday pocket :/

Chaos Computer Club reverse engineered some Qualcomm basebands to find them running in ARM supervisor mode with no NX bit. NSA must love that

[ Parent | on HN ]