all 36 comments

sorted by: hot top controversial new old

I like how the image clearly shows a blue sky for this very expected and foreseeable headline.

  • source
  • [–] 46 points 1 year ago (7 children)

    You can help

    I flashed a $10 orbic to take to local protests.

  • source
  • hideshow 7 child comments
  • [–] 11 points 1 year ago (6 children)
  • [–] 29 points 1 year ago (5 children)

    Cops use devices to pretend to be a celltower, so your phone connects to it, and then they use it to spy on you. Rayhunter looks for this behaviour and warns you if it detects a suspicious tower that behaves like cops pretending to be a tower.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 8 points 1 year ago (4 children)

    What do you do if it comes up positive? Presumably if you know it's a risk, you'd leave your phone in airplane mode or at home, and if you know it's happening you've already been recorded?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 15 points 1 year ago (2 children)

    At the moment, about all you can do is let others know and submit the log to EFF so they can better understand how these stingrays are being used.

    Or I guess if you're feeling froggy; look around for a van/trailer with suspicious antenna(s).

  • source
  • parent
  • hideshow 2 child comments
  • [–] 35 points 1 year ago (8 children)

    At protests you should not bring your smartphone but instead rely on anonymous drvices such as Meshtastic.

    If you want to bring your smartphone to a protest, set Airplane mode and communicate with others through Bluetooth or WiFi networks using Briar or Bitchat

  • source
  • hideshow 8 child comments
  • [+] 11 points 1 year ago (2 children)
  • [–] 5 points 1 year ago* (1 child)

    May I ask you how? Or if you have more info? No criticism here, honest question. Afaik the only way to do that would be to fingerprint a behavioural pattern, which albeit possible is surely more secure than cell communication.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 8 points 1 year ago (1 child)

    Meshtastic with 3 jumps would be stretching for actual communication. Plus Bluetooth is even worse for security. Direct connection might be a better way to use the device.

    I've had meshtastic for about 2 ish years now and its still being worked on.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 1 year ago* (last edited 1 year ago)

    What is unsafe about cell communication is that there is virtually no way to prevent being tracked. Bluetooth is not necessarily more secure but has several advantages:

    1. Its Mac address can be easily changed. With a fake Mac address it's more difficult to track someone down, albeit it needs some "technical skills" (going in the developer settings)
    2. With these apps communication is encrypted by default unlike cell tower communication
    3. The range is limited. If police listens over Bluetooth they'll be able to track less people down
  • source
  • parent
  • [–] 4 points 1 year ago (3 children)

    Isn't Bluetooth easy to intercept?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 6 points 1 year ago* (1 child)

    Super easy. You can also do basic triangulation with some specialty hardware.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago*

    But we're talking about a protest where bad actors (the police) just want the names of its attendants. Our phones scream to everyone "I am [name surname] and I am here!". Bluetooth instead says the same but with a lower tone of voice, so less people can listen. Also, with little configuration you can instruct it not to broadcast its identifier.

  • source
  • parent
  • load more comments (-1 replies)
    [–] 23 points 1 year ago (8 children)

    I don't understand why cell phones don't authenticate the towers they connect to. Is this really just a "standards lag behind modern security" thing, or is it on purpose to allow these Stingray devices to be used?

  • source
  • hideshow 8 child comments
  • [–] 7 points 1 year ago* (1 child)

    why cell phones don’t authenticate the towers they connect to.

    I believe it's because they assume it's not necessary because it was until now

    • prohibitively expensive, but now a "tower" is less than 2k EUR e.g. https://www.crowdsupply.com/ukama/ukama
    • prohibitively complex, see above, namely you don't need to be a TelCo engineer to get it going
    • probably illegal, namely you needed (and I bet still need in most places) wireless band allocation before you could deploy anything

    ... so I imagine there was no authentication because there was no practical threat beside few "fun" examples in CCC or DEF Con.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 year ago

    The use of Stingray by US law enforcement has been challenged on grounds that the law enforcement agencies have no spectrum license. Those challenges seem not to have found success.

    On the other hand, prisons in the US have been stopped from operating cell phone jammers on prison grounds, on the same complaint of no spectrum license.

  • source
  • parent
  • [–] 6 points 1 year ago

    I don't know the specific methods, but 3G, 4G and 5G do authenticate bidirectionaly, just 2G doesn't, partially why Android now has "Disable 2G" toggle.
    Also probably why they said they can downgrade you to 2G to intercept communication.

    What's happening here is probably similar to anyone being able to send Wi-Fi deauthentification frame to your device to disconnect you. Unless you're using WPA3.

  • source
  • parent
  • [–] 2 points 1 year ago (2 children)

    IMEI/IMSI are collected (and immediately linked, hence deanonymized even if SIM was inserted only once) by cell tower operators. Just not bring your device, period.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 23 points 1 year ago

    Yeah, if you go protest you should leave your tracking device at home or, even better, with a friend or relative who you know will not be there. The US government doesn't require subcutaneous tracking chips (yet), you can put yours away.

  • source
  • [–] 10 points 1 year ago (1 child)

    Those circumstances include immediate threats to national security and situations where a person is in danger of death or serious injury.

    Well I see a problem there. It doesn’t specify the cause of the danger or the reason the person is in danger in the first place.

  • source
  • hideshow 1 child comment
  • [–] 9 points 1 year ago

    EFF missed a fun opportunity to call the Rayhunter “DeCSS”.

  • source
  • [–] 6 points 1 year ago (1 child)

    This is exactly why I was railing against some of the earlier protests which featured politicians openly asking protestors to take out their phones and send texts to opt-in for fundraisers. Besides all the obvious bullshit, it put those protestors who didn't know better at serious risk.

    Thankfully, I haven't seen too much of that at the protests I've been to recently, but this is a good reminder that we have to keep educating people to leave their phone at home.

  • source
  • hideshow 1 child comment
  • [–] 4 points 1 year ago

    Pass paper notes

  • source
  • [–] 3 points 1 year ago

    When I go to a protest with friends/family we leave our phones at home and then use basic walkie talkies. It's open channel, so no privacy, but the main goal is to just communicate basics like "I'm safe." We predetermine a couple of locations to meet up at if things get rough and we're separated.

  • source
  • 165 comments in c/technology@lemmy.world view that post
    8 comments in c/boycottus@lemmy.ca view that post
    6 comments in c/technology@lemmy.zip view that post