Going to a Protest? Don't Bring Your Phone
FTFY
Going to a Protest? Don't Bring Your Phone
FTFY
This might be relevant for following ICE around or direct action, but at this point there's almost zero personal risk from attending something like a rally or a march.
My relatives and even friends my age are afraid to go to protests. They read stuff like this, and it acts as demobilization messaging. In my experience, once you get them to go once they're no longer afraid to engage, but there's an initial fear and anticipatory obedience that has to be overcome.
inb4 protests do nothing: getting people to stick their toe in the water helps build commitment that will one day be necessary to gain critical mass for more organized disobedience.
I go to protests without my phone, and I'm afraid every time.
I get that nothing is likely to happen to me, but it could. I get that this is am irrational fear. But idk strategically what to do.
This might be relevant for following ICE around or direct action, but at this point there's almost zero personal risk from attending something like a rally or a march.
No. If the data exists at any point, then a future threat will be able to exploit it, so full on nazi style fascism might not be here yet, but when it is, you'll be in danger. Data can sleep forever before it becomes a threat.
ICE has literally started going door to door in Minnesota looking for immigrants and activists. It's already starting, people need to be protecting their privacy now.
IMO just having your personal device on you in the presence of a protest puts you in danger. They have ample tools to track cellular devices that basically cannot be guarded against without disabling the function altogether, such as with a Faraday bag. They will catch and log that you were at a protest, and use that against you later.
Don't bring your phone period. Any and all devices can be broken into by law enforcement. Buy a burner with cash if you need some kind of communication.
Its not the device cracking that's the problem; its the "your device was identified at the protest we have labeled a riot and has been tracked to your home, which we will now raid in the middle of the night".
Has this regime already done this or are you just saying what the next steps might be if nothing changes?
For the "already done this":
https://en.wikipedia.org/wiki/COINTELPRO
For the modern technology making it significantly easier:
https://en.wikipedia.org/wiki/IMSI-catcher
https://en.wikipedia.org/wiki/Stingray_phone_tracker
TL:DR, if you're at a protest and your signal drops to 2G, your device is being monitored and tracked. Whether or not anyone acts on that data is a whole other thing.
And bring a separate video camera
Yes a burner that you don’t activate. Keep it in a faraday bag. In an emergency you can take it out and call 911.
Yep, ding ding ding, buy a burner phone, with cash, from a store that doesn't have many or very good cameras.
Bringing your real main phone is you thinking you know more about cybersecurity and surveillance than Palantir, than all the cybersec and intel firms the US Mil and Police departments have been partnering with with over a decade now.
99.99999999% chance you don't.
Just don't bring it. Bring a digital pocket camera instead to document stuff.
Nowadays, you can't use a mobile phone without signing in to some Google service or Apple. It's mandatory. Giving them access to every data you own.
That and cell towers….
But a cheap burner. Don’t activate it. Keep it in a faraday pouch. In an emergency remove from faraday pouch and call 911. You can do that on phones you don’t activate.
But everything else, like you said, document with a digital camera.
GrapheneOS or KaiOS?
With the SIM completely turned off, maybe. But it's still a bad idea.
Yup. It’s a bit of a question of how paranoid are you/you feel you need to be but it may be worth keeping in mind that the baseband modem of any phone is proprietary and runs its own unaudited software the end user has no control over or insight into.
I use my android phons without a google acccount without having a custom rom, it is usable just that most people are too ignorant and clueless
I have a Samsung phone and it is mandatory to have a Samsung account to use it.
I have a Samsung Galaxy S10e and no Samsung account. I just flashed the rom. I also bought an unlocked phone, but I don't think that actually matters. I am replying to you with said Samsung Galaxy S10e.
You don't need a samsung account lol. You probably missed the small text that allows you to skip it.
Maybe I'm missing something though?
I got a body cam for about $50 amazon dot com/dp/B0BHZ4PRRG, currently unavailable. Makes a great dashcam too. When the usb charging cable is plugged in it turns on when you start your car and turns off when you turn off your car.
The only thing you're missing is to put a piece of white tape on the sole of your shoe. When you are lying on the ground It's a cop signal that you are an undercover agent.
Going to a protest? Don’t bring your phone without doing this first
I’m skeptical of bringing your phone at all, either in airplane mode or off, because modern phones still broadcast location when it’s ‘dead’ in order for you to find it. But I don’t know enough about that to say for sure
Shitty article. Doesnt even contain the words SIM card or IMEI so it has no business advising people on whats safe to bring to a protest. There is no such thing as cop-proofing a mobile phone unless all wireless modules have been removed. The cops can and do track peoples cell tower signal derived locations and they can log active Wifi/Bluetooth MAC addresses in their vicinity.
As others have said, just dont bring it if you are scared. Consider just using a bodycam or gopro style camera.
Modern phones rotate random MAC addresses. For WiFi, capturing SSID probes can be enough to track somebody though (some phones also have some mitigation for that too, like not probing for an SSID after it hasn't been seen for some amount of time). Even when turned off, many phones, including iPhones, turn into BLE beacons similar to AirTags, which can be used to track you.
almost worthless. I just learned that the android 13 xiaomi phone of a family member broadcasts some of the wifi AP names it knows when scanning for available networks! constantly! why the fuck it does I don't know because neither are hidden networks that would need this, and there's no setting for it
Yeah, I'm guessing it's so if you "hide" the network, it will still connect to it. Anyone can scan these advertisements, then go to wigle.net and likely get a good idea of where you live/work.
Are those networks marked as hidden SSID networks? Hidden networks require the client STA to broadcast them to find them.
Good additions, thanks.
Modern phones rotate random MAC addresses
My phone does, but im not sure if normal google/apple phones do by default.
Thank you, I have been saying this. Use a regular camera and be sure to delete meta data off images and videos when uploading!
This is slightly false in an alarmist fashion. At least in the US, the police are not actively tracking anything without a subpoena to the cellular provider of the phone in question. They can look at the location data after the fact, using a court ordered subpoena. They can also use live location data in an emergency situation,also using a court ordered subpoena.
Cellular data from cell towers on cell networks are private property of the cellular provider companies. That's not to say you are private while on them. Just that the police are not actively tracking your location through them without great effort for each individual they wish to track.
Commercial location data, in this case acquired from hundreds of millions of phones via a company called Penlink, can be queried without a warrant, according to an internal ICE legal analysis shared with 404 Media.
https://www.404media.co/inside-ices-tool-to-monitor-phones-in-entire-neighborhoods/
I thought this was using SDKs embedded in apps and advertising platforms. This is a different threat model. You need to block ads and prefer using websites instead of apps which have more access to device info like the advertising ID.
If you've got an Android, go to Settings, search for ads, and find the advertising ID and delete the ID. It's a stable identifier that can be used to identify your phone.
Switch to more private browsers like Firefox for Mobile and install uBlock Origin.
EDIT: I'm not saying this will protect you against IMSI catchers or tower based drag nets. In addition to not bringing your phone, when you do go home you need an entirely different set of tools to protect yourself.
They can also use live location data in an emergency situation,also using a court ordered subpoena.
What qualifies as an "emergency situation"? I imagine that definition could be stretched pretty thinly
Yeah cell tower data is private just like your google search history is private. Which means absolutely not private. Also cops can (and do) use fake cell towers to make your phone connect to something that they have live access to.
I would like to bring the attention to LoRa.
Meshtastic is a good example of leveraging LoRa.
Cripes all of that and not even, "Buy a burner SIM card", "Use a VPN at all time if you have to use data", "For the love of god don't use biometrics as authorization, use a alphanumeric password to unlock", "Use the damn encryption solution provided by your phone's OS".
A VPN does not stop location data for your physical device when looking at cellular data from the carrier. Your location can and is always triangulated using cell towers. VPNs only ever protect your IP address from being geolocated and encrypting the data downloaded and uploaded while connected. Bit streams are still sent and received from a physical place in the world before the VPN hides your traffic and that is recorded by the cell provider.
I turned off biometrics for unlocking the phone. Still works for downloads, passwords, everything but unlocking the phone. I’ve barely noticed a change.
Shut off and leave your phone at home, buy a pay-as-you-go to bring with you for emergency contact/coordination
Shut off and leave your phone at home, buy a pay-as-you-go to bring with you for emergency contact
/coordination
Leave the pay-as-you-go phone powered off too, and only power it up if you actually have to use it. If you have to use it once, you need to get a replacement for a future event.
I'm thinking perhaps something like Meshtastic transmitters and receivers should be used for coordination instead.
Meshtastic is exactly what needs to be implemented
I ran across that instance the other day and immediately thought about coordination.
It's like sneaker net for piracy.
Meshtastic is just as susceptible to listening and isn’t perfect at encryption or anonymity but should be another tool to consider when cellphone towers are down or otherwise unusable.
I believe there are Bluetooth network protocols that mesh that would work for messaging and not require cell service. It would be smart to organize using something like that and just use any cell phone without cell service turned on. That still gives you the ability to call 911 in case of emergencies as well.
True, but if surveillance is your concern, they are monitoring Bluetooth devices too.
You can use Briar, BitChat, or Bridgefy to communicate, without having internet connections. I've only tried Briar, which works with cell networks, wifi, also bluetooth.
Cell service is always turned on on a phone, even with no SIM card and the phone in airplane mode, and for most phones, even when the phone is “off”. They still ping the local towers semi regularly; they just don’t ramp up transmission power ir try to establish a full connection.
Anyone got a list of Bluetooth devices without a cell antenna where the BT MAC is regularly scrambled?
Does it matter if that cell service isn't connected to a name?
It's connected to your name when you go home
Unless you stop at a coffee shop, upload content to a secure server, ditch the SIM and power off the device.
Unless you stop at a coffee shop
Now they also have you on camera
What kind of garbage corporate coffee shops are you going to?
I don't go to any coffee shops, but I have eyes and can see the cameras in every shop and café (regardless of how "corporate" they are) as I pass them.
Useless paranoia. Most of the cameras are on phones anyway.
So, turn it off before you go home?
No, because it will spend most of its time after leaving the store in your home.
I bring my phone, and my wallet, and my keys, and a $7,000 camera, and my lawyer's phone number in my head.
they can suck my balls
always film cops
Buy a used phone on eBay. Activate with phreeli at a library. Only turn on phone at protests. Turn off when you leave.
top 99 comments