[Gsmmap] Android 5 support (Re: Snoopsnitch doesn't work with real IMSI catcher and against Silent SMS)

Karsten Nohl nohl at srlabs.de
Thu Feb 19 12:02:46 CET 2015


Dear Ralph,

The current SnoopSnitch v 0.9.3 supports Android 5.0.

In one instance -- on a Samsung S5 -- we noticed that Samsung removes the necessary kernel support when updating to Android 5. SnoopSnitch does not work anymore after the update.

Perhaps that's what you are observing?

Cheers,

     -Karsten


> On Feb 19, 2015, at 11:51 , Ralph A. Schmid, dk5ras <ralph at schmid.xxx> wrote:
> 
> Are there any plans supporting newer Android version (if possible)? I found that I kicked myself out of using snoopsnitch by updating my HTC One m8 to Android 5 :-(
> 
> Ralph.
> 
>> -----Original Message-----
>> From: gsmmap-bounces at lists.srlabs.de [mailto:gsmmap-
>> bounces at lists.srlabs.de] On Behalf Of Linus Neumann
>> Sent: Thursday, February 19, 2015 11:43 AM
>> To: Jakub Kříž; gsmmap at lists.srlabs.de; Alex Senier
>> Subject: Re: [Gsmmap] Snoopsnitch doesn't work with real IMSI catcher and
>> against Silent SMS
>> 
>> Dear Jakub,
>> 
>> While we theoretically can not rule out the existence of IMSI catcher models
>> or attack patterns that are not yet covered by SnoopSnitch, any SMS attacks
>> will be detected with very high sensitivity and specificity.
>> 
>> Since you are describing that even SMS attacks remained undetected, I
>> assume that SnoopSnitch was not properly running on your phone.
>> Either, it was simply not active; or your model is not properly supported.
>> 
>> Please provide your
>> • Phone model
>> • Software Version and
>> • App ID
>> 
>> via personal E-mail (off list!) to me and my colleague Alex Senier
>> <alex at srlabs.de> In case further debugging is necessary, we would also love
>> to receive the BB logs regarding your detection cases. Alex will be happy to
>> support you in creating them.
>> 
>> Best regards,
>> 
>> Linus
>> 
>> 
>>> On 19 Feb 2015, at 10:50, Jakub Kříž <krizja at gmail.com> wrote:
>>> 
>>> Hi list,
>>> I tested snoopsnitch with several real IMSI catchers and several
>> configurations and unfortunately snoopsnitch didn't signalize any alerts,
>> although phone was trapped by unit successfully. Location update procedure
>> was performed in 2G and also in 3G, but without any attack alert.
>>> When I sent silent sms from HushSMS  app so again nothing happened. I
>> know that the class0 silent sms is most common type of silent sms, but
>> SnoopSnitch doesn't signalize any attack....
>>> 
>>> May I ask you how did you test the SnoopSnitch? Or what's the main idea
>> of snoopsnitch real-time user protection against attacks?
>>> 
>>> Thank you
>>> Jakub
>>> 
>>> _______________________________________________
>>> Gsmmap mailing list
>>> Gsmmap at lists.srlabs.de
>>> https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap
> 
> 
> _______________________________________________
> Gsmmap mailing list
> Gsmmap at lists.srlabs.de
> https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap



More information about the Gsmmap mailing list