[Gsmmap] Android 5 support (Re: Snoopsnitch doesn't work with real IMSI catcher and against Silent SMS)

Karsten Nohl nohl at srlabs.de
Thu Feb 19 12:42:27 CET 2015


Dear Ralph,

> On Feb 19, 2015, at 12:40 , Ralph A. Schmid, dk5ras <ralph at schmid.xxx> wrote:
> 
> Hi,
> 
> I get the message" Your device is incompatible. Reason: Device /dev/diag 
> does not exist, no Qualcomm chipset or unsuitable ROM."

That's the same observation we made on the Samsung S5: The required device is removed as part of the Android upgrade.

Cheers,

     -Karsten


> This came after the update from 4.4.4 to 5.0.1, so I assume it must be a 
> software thing :)
> 
> Ralph.
> 
>> -----Original Message-----
>> From: Karsten Nohl [mailto:nohl at srlabs.de]
>> Sent: Thursday, February 19, 2015 12:03 PM
>> To: Ralph A. Schmid, dk5ras
>> Cc: gsmmap at lists.srlabs.de
>> Subject: Android 5 support (Re: Snoopsnitch doesn't work with real IMSI
>> catcher and against Silent SMS)
>> 
>> Dear Ralph,
>> 
>> The current SnoopSnitch v 0.9.3 supports Android 5.0.
>> 
>> In one instance -- on a Samsung S5 -- we noticed that Samsung removes the
>> necessary kernel support when updating to Android 5. SnoopSnitch does not
>> work anymore after the update.
>> 
>> Perhaps that's what you are observing?
>> 
>> Cheers,
>> 
>>     -Karsten
>> 
>> 
>>> On Feb 19, 2015, at 11:51 , Ralph A. Schmid, dk5ras <ralph at schmid.xxx>
>> wrote:
>>> 
>>> Are there any plans supporting newer Android version (if possible)? I
>>> found that I kicked myself out of using snoopsnitch by updating my HTC
>>> One m8 to Android 5 :-(
>>> 
>>> Ralph.
>>> 
>>>> -----Original Message-----
>>>> From: gsmmap-bounces at lists.srlabs.de [mailto:gsmmap-
>>>> bounces at lists.srlabs.de] On Behalf Of Linus Neumann
>>>> Sent: Thursday, February 19, 2015 11:43 AM
>>>> To: Jakub Kříž; gsmmap at lists.srlabs.de; Alex Senier
>>>> Subject: Re: [Gsmmap] Snoopsnitch doesn't work with real IMSI catcher
>>>> and against Silent SMS
>>>> 
>>>> Dear Jakub,
>>>> 
>>>> While we theoretically can not rule out the existence of IMSI catcher
>>>> models or attack patterns that are not yet covered by SnoopSnitch,
>>>> any SMS attacks will be detected with very high sensitivity and 
>>>> specificity.
>>>> 
>>>> Since you are describing that even SMS attacks remained undetected, I
>>>> assume that SnoopSnitch was not properly running on your phone.
>>>> Either, it was simply not active; or your model is not properly 
>>>> supported.
>>>> 
>>>> Please provide your
>>>> • Phone model
>>>> • Software Version and
>>>> • App ID
>>>> 
>>>> via personal E-mail (off list!) to me and my colleague Alex Senier
>>>> <alex at srlabs.de> In case further debugging is necessary, we would
>>>> also love to receive the BB logs regarding your detection cases. Alex
>>>> will be happy to support you in creating them.
>>>> 
>>>> Best regards,
>>>> 
>>>> Linus
>>>> 
>>>> 
>>>>> On 19 Feb 2015, at 10:50, Jakub Kříž <krizja at gmail.com> wrote:
>>>>> 
>>>>> Hi list,
>>>>> I tested snoopsnitch with several real IMSI catchers and several
>>>> configurations and unfortunately snoopsnitch didn't signalize any
>>>> alerts, although phone was trapped by unit successfully. Location
>>>> update procedure was performed in 2G and also in 3G, but without any
>> attack alert.
>>>>> When I sent silent sms from HushSMS  app so again nothing happened.
>>>>> I
>>>> know that the class0 silent sms is most common type of silent sms,
>>>> but SnoopSnitch doesn't signalize any attack....
>>>>> 
>>>>> May I ask you how did you test the SnoopSnitch? Or what's the main
>>>>> idea
>>>> of snoopsnitch real-time user protection against attacks?
>>>>> 
>>>>> Thank you
>>>>> Jakub
>>>>> 
>>>>> _______________________________________________
>>>>> Gsmmap mailing list
>>>>> Gsmmap at lists.srlabs.de
>>>>> https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap
>>> 
>>> 
>>> _______________________________________________
>>> Gsmmap mailing list
>>> Gsmmap at lists.srlabs.de
>>> https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap
> 
> 



More information about the Gsmmap mailing list