That latest report on mass location surveillance using SS7 makes me want to try a test. I’ll enable airplane mode and VoLTE, and see how calls and messages perform when only using VPN over WiFi. If that works reasonably well then the next step is to us a mobile hotspot for the WiFi.In the end my SS7 location would always show the geolocated IP address of where the VPN terminates. Does that sound about right #Privacy #DefCon #Phreaks

all 12 comments

sorted by: hot top controversial new old
[–] 1 point 1 year ago

@thedarktangent they will still track you, because it's not your phone they track but your sim.So if you move your sim to an hotspot, you move the problem and they will track the hotspot instead.

  • source
  • [–] 1 point 1 year ago

    @thedarktangent probably related technical details pointed out on July, basically legacy hardware and mis-masking:cybersecuritynews.com/ss7-bypa

  • source
  • [–] 1 point 1 year ago (1 child)

    @thedarktangent I'm curious to know what your results end up being. I know using speedtest behind a VPN will cause your exit geolocation to change due to polling the phone's gps.

  • source
  • hideshow 1 child comment
  • [–] 1 point 1 year ago (1 child)

    @thedarktangent Maybe I'm not understanding their technology, but I thought that they use SS7 protocol to get cell tower data to track you. So, if you are using Wi-Fi only, and have all cell services off, then they won't see your true location. I didn't see anything about geolocation of IP addresses. For fun, you could even get a burner phone, use it as a mobile hotspot and leave your phone off except for Wi-Fi, and still use a VPN. Then you have wireless mobility. Or maybe an eSIM?

  • source
  • hideshow 1 child comment
  • [–] [S] 1 point 1 year ago

    @Ehay2k You would be on WiFi using the VoLTE protocol to still make and receive calls. I’m not 💯 on what ends up discoverable by SS7. I’m guessing it would report something as your location, But is it your Mobile Operator IP? Your gateway IP?

  • source
  • parent
  • [–] 1 point 1 year ago (1 child)

    @thedarktangent In case this throws off your testing - from what I understand the IPSec tunnel that enables VoWiFi bypasses your phone's VPN settings if you have the VPN configured on the device (at least on Android).

  • source
  • hideshow 1 child comment
  • [–] 1 point 1 year ago (2 children)

    @thedarktangent they will still track you, because it's not your phone they track but your sim.So if you move your sim to an hotspot, you move the problem and they will track the hotspot instead.also Wi‑Fi‑calling can leak the same IMSI over the internet, so you will remain trackable.And disabling 2G, 3G, or 4G on the client side will do nothing as it's a vulnerability in the ISP core network.As such it will remain.The only FIX is to disable everything brefore 5G (Stand alone) and use 5G stand alone.As 5G NSA (Non Stand Alone), use 4G control model that is vulnerable too.and as i said previously, the hotspot itself will be tracked anyway in your "test"

  • source
  • hideshow 2 child comments
  • [–] [S] 1 point 1 year ago (1 child)

    @lexinova The SIM in the hotspot would be some random sim not associated with you so they wouldn’t know what to track.What I’m most interested in is with this set up what does my location appear as?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 year ago

    @thedarktangent the same as your phone because : not change as an "unassociated sim" is illegal in nearly all our country, and in practice impossible to have as it always have record to link it to you (even if more or less difficult to find depending on how you buy it), and it's quite easy for any people that have this kind of network access to reassociate it to you after the fact.And even there the fact you enable vo WIFI will leak your original sim imsi via internet.Here the thing to know it's "impossible" to fix or protect yourself with client side fix only.

  • source
  • parent
  • @thedarktangent very interesting to hear from Phreaking experts. No pure crypto-phones, eh?

  • source