DOJ Often Used Cell Tower Impersonating Devices Without Explicit Warrants

Via the EFF comes news that, during a case involving the use of a Stingray device, the DOJ revealed that it was standard practice to use the devices without explicitly requesting permission in warrants. "When Rigmaiden filed a motion to suppress the Stingray evidence as a warrantless search in violation of the Fourth Amendment, the government responded that this order was a search warrant that authorized the government to use the Stingray. Together with the ACLU of Northern California and the ACLU, we filed an amicus brief in support of Rigmaiden, noting that this 'order' wasn't a search warrant because it was directed towards Verizon, made no mention of an IMSI catcher or Stingray and didn't authorize the government — rather than Verizon — to do anything. Plus to the extent it captured loads of information from other people not suspected of criminal activity it was a 'general warrant,' the precise evil the Fourth Amendment was designed to prevent. ... The emails make clear that U.S. Attorneys in the Northern California were using Stingrays but not informing magistrates of what exactly they were doing. And once the judges got wind of what was actually going on, they were none too pleased:"

Comments

Hosts file corollary

[Anonymous Coward]

Wouldn't it be nice if the user had some visibility and control over what tower their own phone connects to. A sort of "hosts file" white-list except not for IP addresses.

Re:Hosts file corollary

[femtobyte]

The $10,000 question, though, is whether the cell companies would simply hand over the full cryptographic keys to the government snoops, so the fake towers would be indistinguishable from the true. When your phone resolves 4 towers simultaneously with the same 1 identity, how does it choose the true one?

Re:Hosts file corollary

[citizenr]

GSM has no network authentication (only user authenticates to the network, network doesnt authenticate to the user).
3G/UMTS has authentication both ways and is mitm secure (in theory = if your phone is not broken)

Just force phone to only talk 3G and you will be secure.

Harris Corp CEO

[Vinegar Joe]

My, my, my........

"Harris Corp. President and CEO William M. Brown was appointed to President Barack Obama's National Security Telecommunications Advisory Committee on Tuesday, Florida Today reports."

http://www.bizjournals.com/orlando/morning_call/2012/11/harris-corp-ceo-appointed-to-obama.html

Re:stingray phone tracking device

[BLKMGK]

Here you go!

http://www.youtube.com/watch?v=DU8hg4FTm0g

Thanks Chris - damned interesting talk :-) This also shows you how many phones may be attracted by such devices if there's no filter on the IME...

Re:MITM attack: impersonates a cellular tower

[BLKMGK]

You can place a filter on the IME but you have to know it first, in theory they would. chris Paget did a talk on this that was VERY informative that I found while researching SDR -> http://www.youtube.com/watch?v=DU8hg4FTm0g

What he did was actually legal but if he had wanted to he could've intercepted FAR more and his comments about jamming were also pretty interesting. It's not just voice you can grab either but text and data. Very interesting to see how it works but scary that it's apparently not as secure as it could be...