[Gsmmap] Snoopsnitch doesn't work with real IMSI catcher and against Silent SMS

Ralph A. Schmid, dk5ras ralph at schmid.xxx
Thu Feb 19 11:51:51 CET 2015


Are there any plans supporting newer Android version (if possible)? I found that I kicked myself out of using snoopsnitch by updating my HTC One m8 to Android 5 :-(

Ralph.

> -----Original Message-----
> From: gsmmap-bounces at lists.srlabs.de [mailto:gsmmap-
> bounces at lists.srlabs.de] On Behalf Of Linus Neumann
> Sent: Thursday, February 19, 2015 11:43 AM
> To: Jakub Kříž; gsmmap at lists.srlabs.de; Alex Senier
> Subject: Re: [Gsmmap] Snoopsnitch doesn't work with real IMSI catcher and
> against Silent SMS
> 
> Dear Jakub,
> 
> While we theoretically can not rule out the existence of IMSI catcher models
> or attack patterns that are not yet covered by SnoopSnitch, any SMS attacks
> will be detected with very high sensitivity and specificity.
> 
> Since you are describing that even SMS attacks remained undetected, I
> assume that SnoopSnitch was not properly running on your phone.
> Either, it was simply not active; or your model is not properly supported.
> 
> Please provide your
> • Phone model
> • Software Version and
> • App ID
> 
> via personal E-mail (off list!) to me and my colleague Alex Senier
> <alex at srlabs.de> In case further debugging is necessary, we would also love
> to receive the BB logs regarding your detection cases. Alex will be happy to
> support you in creating them.
> 
> Best regards,
> 
> Linus
> 
> 
> > On 19 Feb 2015, at 10:50, Jakub Kříž <krizja at gmail.com> wrote:
> >
> > Hi list,
> > I tested snoopsnitch with several real IMSI catchers and several
> configurations and unfortunately snoopsnitch didn't signalize any alerts,
> although phone was trapped by unit successfully. Location update procedure
> was performed in 2G and also in 3G, but without any attack alert.
> > When I sent silent sms from HushSMS  app so again nothing happened. I
> know that the class0 silent sms is most common type of silent sms, but
> SnoopSnitch doesn't signalize any attack....
> >
> > May I ask you how did you test the SnoopSnitch? Or what's the main idea
> of snoopsnitch real-time user protection against attacks?
> >
> > Thank you
> > Jakub
> >
> > _______________________________________________
> > Gsmmap mailing list
> > Gsmmap at lists.srlabs.de
> > https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap





More information about the Gsmmap mailing list