http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/ Engadget Comments for http://www.engadget.com/media/feedlogo.gif http://www.engadget.com en-us Copyright 2012 Weblogs, Inc. The contents of this feed are available for non-commercial use only. Blogsmith http://www.blogsmith.com/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Jul 31st 2010 10:31PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
NICE MSPAINT, ENGADGET]]>Jul 31st 2010 10:35PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/


]]>Jul 31st 2010 10:37PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
What should I use instead of WPA?]]>Jul 31st 2010 10:38PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Jul 31st 2010 10:43PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Jul 31st 2010 10:48PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Jul 31st 2010 10:49PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Jul 31st 2010 10:49PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Jul 31st 2010 10:56PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
Umm, try checking your math again. 100% more of zero is still zero. ]]>Jul 31st 2010 11:09PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Jul 31st 2010 11:23PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
Quality assurance = fun ass job.

Your job is to break shit, then break the news to the developer that their shit is broken.]]>Jul 31st 2010 11:47PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
Rofl. Now who's the dying cell technology? Might not be able to send data and talk at the same time, but at least we haven't been HAXX0Rd rofl.

Signed,
CDMA]]>Aug 1st 2010 12:37AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/as soon as i saw this article i though it would be chris paget
this dude knows what he is doing]]>Aug 1st 2010 12:46AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Quote(Rofl. Now who's the dying cell technology? Might not be able to send data and talk at the same time, but at least we haven't been HAXX0Rd rofl.

Signed,
CDMA
)QUOTE
"The purpose of the demonstration was highlight a major flaw in the 2G GSM system."

You can only talk and browse on 3g this clearly states it only affects 2g GSM lrn2troll.
Also how many people use 2g anymore? My iPhone NEVER sees 2g!!!!]]>Aug 1st 2010 1:03AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/I'm glad I live in Central Florida which was very wide spread 3g.]]>Aug 1st 2010 1:10AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
One hundred "per cent" (per hundred) is one. GG.]]>Aug 1st 2010 1:16AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
Protip: When a GSM phone accesses the towers to make a call, it switches into 2G, aka EDGE on AT&T, to complete both the call and transfer the data. That's why the data rates are reduced in-call, because it's on a slower network.

Learn2educate yourself.]]>Aug 1st 2010 2:23AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
To clarify:

"Actually you can not use 3G for voice and data at the same time. AT&T does not use 3G for voice on any phone. It is a limit that they have set on their end, not on the phone. 3G is only used for data through AT&T. This is why you CAN use data and voice at the same time. Other companies, such as Sprint and T-Mobile, use 3G for voice and data. Which is why you CAN NOT use voice and data at the same time."

Source:http://forums.macrumors.com/showthread.php?t=484056

Seriously, rofl. This proves GSM is fundamentally flawed. Glad you're enjoying your data and voice at the same time. Turns out it's the root of the hacking exploit. lol]]>Aug 1st 2010 2:30AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Really, then how come this was only possible on the iPhone 3g and up even thought the 2g is the exact same hardware save the 3g antenna.
Also if you turn off 3g during a call how come you have to drop the call? Also how come I get 300kbps per sec on a speed test while on the phone over the air whilst on 3g, the max for 2g is 150kbps???
lrn2deductivereason]]>Aug 1st 2010 2:37AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
WRONG. AT&T uses 3G for voice and data. If the 3G network is full, then a call is dropped to 2G and data is lost altogether.

BTW, T-Mobile uses the same technology. It also allows their users to have voice and data simultaneously on 3G.]]>Aug 1st 2010 2:43AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Also
lrn2lookforrealsourcesandnotjustsomeshittyforum]]>Aug 1st 2010 2:45AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
You would think that ATT fixed this already. ]]>Aug 1st 2010 2:49AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
I apologize. I was incorrect. It seems that AT&T's 3G can handle voice and data at the same time via the same technology, a wireless VOIP. The data rates are reduced because you're sharing the voice with the data in the same stream.]]>Aug 1st 2010 2:51AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/It's all good sorry for being a dick. lol nice to meet someone who actually accepts responsibility... ]]>Aug 1st 2010 2:53AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
Oh, do cite YOUR sources, then. You're citing your own personal experience. I've never owned a GSM phone, and there is very little online on the subject of GSM voice + data.

l2notbeanasshole

Either way, if you had read the article, the guy could simply turn on one of his 3G jammers and force every AT&T (or T-Mobile) phone in the room onto 2G. It's relatively simple to do.]]>Aug 1st 2010 2:54AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
And I'm sorry. You WERE kind of being an asshole for a minute. Didn't know how this was going to work. When I'm wrong, I'm wrong. lol I'll readily admit it. I've never owned a GSM phone, so I was going on the assumption that it worked like CDMA does.

When I make a call on my CDMA phone, it switches completely onto call mode (1x), thus blocking off all data. I had assumed that GSM did the same with EDGE and that it simply layered the data on top. lol]]>Aug 1st 2010 2:57AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/CDMA is weird, eh whatever I am of the theory that you shouldn't be stupid enough to talk about stuff that you wouldn't want anyone to hear on any cellphone let alone GSM. Lol if you want to share something share it in person. Plus I mean pretty much any cellphone now can be bugged with software that does this anyway so it's not like this is something really new just a play on an old idea. On a semi related note, I would totally switch to Verizon if they had the iPhone which may be a possibility with the switch to LTE Sims... ]]>Aug 1st 2010 3:09AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/well, by the time he intercepts your iphone call it would have dropped.
waste of money dude.]]>Aug 1st 2010 3:27AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Aug 1st 2010 3:29AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
Now we've got GSM / CDMA fanboys. Nice.

It's not like you chose CDMA because it was mire secure, so don't give yourself too much credit]]>Aug 1st 2010 6:06AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Aug 1st 2010 7:35AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
When you say 'we' are you assuming that as the owner of a CDMA phone, you have some kinship with your fellow phone buyers?

Anyway let's talk about damage for a second. This works for outgoing calls as the hacker has to connect to a local user making a call and that phone has to choose the hacker's mobile hot-spot.

Assume this happens, what's the worst they can do? Listen to what I'm saying, pretty much like someone walking down the street beside me.

If they wanted to, I'm sure they could use a laser mic much more effectively as they could track me anywhere.

Yeah, I think data + calls at the same time still wins. Not to mention marketshare: GSM=87%, CDMA=13%. I can take my phone anywhere in the world and be assured that I can use it.]]>Aug 1st 2010 8:45AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
Just don't download anything from the app store and you should be fine security wise. ]]>Aug 1st 2010 8:47AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/No, its carrier fanboys. Verizon and sprint Vs tmo and at&t]]>Aug 1st 2010 9:19AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
An ethernet cable honestly is the most secure method....]]>Aug 1st 2010 12:02PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
And iPhone didn't have 3g until version 2.]]>Aug 1st 2010 12:51PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Aug 1st 2010 1:30PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
It says nothing about CDMA, so I'll assume I'm okay with my Verizon phone :)]]>Aug 1st 2010 1:41PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
Whats funny is this perception that CDMA isn't hackable despite the fact that US military jams CDMA and GSM signals at bases and can already tap CDMA transmissions.


Wireless transmissions are never really secure. The only reason this idiot is attacking GSM is due to its popularity. With the massive amounts of CDMA spoofing and ESN duping... security is far from unbreakable.]]>Aug 1st 2010 2:46PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.rcrwireless.com/ARTICLE/20100727/ENABLERAPPS/100729962/how-citibank-dealt-with-an-iphone-app-security-snag

In case you need a reference... ]]>Aug 1st 2010 3:41PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
WPA2]]>Aug 1st 2010 4:25PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Aug 1st 2010 4:27PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
Yeah I can't believe Engadget just put WEP and WPA1 on the same level; WPA1's only exposed vulnerability has been minor in that it just causes a DoS and even doing that requires some prior knowledge, but there hasn't been an exploit that involves compromising encryption keys or user data. WPA1 is still just fine for securing Wifi.]]>Aug 1st 2010 7:09PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Aug 2nd 2010 10:22AMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Aug 2nd 2010 3:08PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/Jul 31st 2010 10:31PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/EST Time]]>Jul 31st 2010 10:32PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
ENGADGET WRITERS ARE SECRETLY FROM THE FUTURE!!!!!1!1!!11!]]>Jul 31st 2010 10:38PMhttp://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/What?! Engadget exists in a time different from mine?
Dude, you're freaking me out.]]>Jul 31st 2010 10:38PM