Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
apseudonym
Feb 25, 2011

theflyingexecutive posted:

well it happened immediately after I asked a LEO eyebrow-raising question, kicked me off wifi, and seemed to act like it couldn't establish secure connections which all screamed mitm to me. it's been 100% after the restore, but dying radio is certainly an option

Have you considered the option that you're just crazy?

Adbot
ADBOT LOVES YOU

theflyingexecutive
Apr 22, 2007

apseudonym posted:

Have you considered the option that you're just crazy?

well I know I am, but stingrays exist and the place I was is a hotbed of surveillance-warranting activities

apseudonym
Feb 25, 2011

theflyingexecutive posted:

well I know I am, but stingrays exist and the place I was is a hotbed of surveillance-warranting activities

Ok well, no. That's not what Stringrays do and I promise you're not worth what the going rate would be for the exploits required to do that.

Or:

apseudonym posted:

Have you considered the option that you're just crazy?

Jabor
Jul 16, 2010

#1 Loser at SpaceChem
Hmm yes, I'm sure a clandestine surveillance device is going to instantaneously do something that makes it really obvious you've been targeted. That definitely sounds like something it would do.

Perplx
Jun 26, 2004


Best viewed on Orgasma Plasma
Lipstick Apathy
if you ever think your iPhone is hacked, just remember that iOS exploits are worth up to 1.5 million usd on the free market

if you ever think you android is hacked
it is

theflyingexecutive
Apr 22, 2007

apseudonym posted:

Ok well, no. That's not what Stringrays do and I promise you're not worth what the going rate would be for the exploits required to do that.

Or:

I'm not, but my friends-of-friends are

if it is a stingray, it's obviously not something super high tech, just a lovely backdoor that chokes out your wifi and hopes you get/make a few incriminating texts/calls so they can fish for other phone numbers while you're connected to it

I'm def crazy, but it was an alarming number of coincidences, one I didn't mention was that I asked Siri twice and it received but did not acknowledge the question

hobbesmaster
Jan 28, 2008

theflyingexecutive posted:

well it happened immediately after I asked a LEO eyebrow-raising question, kicked me off wifi, and seemed to act like it couldn't establish secure connections which all screamed mitm to me. it's been 100% after the restore, but dying radio is certainly an option

or your radio was sending invalid credentials to the carrier and the data connection was trying to redirect you to a registration page

cycling airplane mode will force your cell radio to try and register itself again with the cell network so try that if it happens again

fishmech
Jul 16, 2006

by VideoGames
Salad Prong

theflyingexecutive posted:

well it happened immediately after I asked a LEO eyebrow-raising question, kicked me off wifi, and seemed to act like it couldn't establish secure connections which all screamed mitm to me. it's been 100% after the restore, but dying radio is certainly an option

moments later doesn't sound like whatever overpriced/underperforming government contractor produced device would be able to handle tbqh

some serious NSA poo poo that had brought in to target a specific person really close by to you maybe, but even that'd be a stretch to manage that in that short time - indeed they would specifically want to keep that connection alive as long as possible to try to prevent the target from noticing, and not do anything that directly disrupts the radios until the phone appeared to go idle for an extended time.

theflyingexecutive
Apr 22, 2007

Perplx posted:

if you ever think your iPhone is hacked, just remember that iOS exploits are worth up to 1.5 million usd on the free market

if you ever think you android is hacked
it is

I don't think iOS on my phone was compromised as all the os-level authentications failed

theflyingexecutive
Apr 22, 2007

hobbesmaster posted:

or your radio was sending invalid credentials to the carrier and the data connection was trying to redirect you to a registration page

cycling airplane mode will force your cell radio to try and register itself again with the cell network so try that if it happens again

I def tried that and also resetting my cell network. authentications over https worked (but slowly) and I could access apple pw reset just fine

Qtotonibudinibudet
Nov 7, 2011



Omich poluyobok, skazhi ty narkoman? ya prosto tozhe gde to tam zhivu, mogli by vmeste uyobyvat' narkotiki

theflyingexecutive posted:

I def tried that and also resetting my cell network. authentications over https worked (but slowly) and I could access apple pw reset just fine

when was the last time you smoked a shitton of weed.

was it within the last 4 hours.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
Edit: nevermind

hobbesmaster
Jan 28, 2008

theflyingexecutive posted:

I def tried that and also resetting my cell network. authentications over https worked (but slowly) and I could access apple pw reset just fine

which carrier? sounds like you only had gprs service

theflyingexecutive
Apr 22, 2007

Verizon

isn't forcing you to gprs how stingrays work, too?

Midjack
Dec 24, 2007



if you're that worried cancel your service, trash your phone, and burn any accounts that were on it.

and stay the gently caress off the internet next time you visit persons of interest.

theflyingexecutive
Apr 22, 2007

I would've bought a throwaway account and scrubbed everything if I were actually worried/had any dirt. i don't think I'm being specifically targeted; I'd just like to let my actual friends know and stop inviting their "friends" over before a three-letter raids their building

hobbesmaster
Jan 28, 2008

it wouldn't be gprs on Verizon; that'd be cdma 1x

random tangent: Verizon wants all cdma stuff off their network fast, with a complete shutdown of their cdma networks in the next couple of years

apseudonym
Feb 25, 2011

theflyingexecutive posted:

I would've bought a throwaway account and scrubbed everything if I were actually worried/had any dirt. i don't think I'm being specifically targeted; I'd just like to let my actual friends know and stop inviting their "friends" over before a three-letter raids their building

Besides this post ofc

Lain Iwakura
Aug 5, 2004

The body exists only to verify one's own existence.

Taco Defender

El Mero Mero posted:

https://www.wired.com/2017/04/hackers-hijacked-banks-entire-online-operation/amp/ tl;dr brazilian bank lets someone steal their domain name, who then set up a phony copy with valid https certs from lets encrypt.

the https part is unimportant

Wiggly Wayne DDS
Sep 11, 2010



meanwhile in reality

https://twitter.com/fugueish/status/851668301797179392

Shame Boy
Mar 2, 2010

OSI bean dip posted:

the https part is unimportant

"mentioning lets encrypt in an unrelated report to imply they did something wrong" is the new "charging someone with sodomy so the jury thinks they're icky gays even though it's unconstitutional and the charge will be thrown out"

atomicthumbs
Dec 26, 2010


We're in the business of extending man's senses.

Shaggar posted:

are there any mechanisms for padding out data that's encrypted to prevent this kind of thing?

THE WORLD WONDERS

hackbunny
Jul 22, 2007

I haven't been on SA for years but the person who gave me my previous av as a joke felt guilty for doing so and decided to get me a non-shitty av
speaking of certificates: anyone knows of a CA that issues ECDSA certificates?

vOv
Feb 8, 2014

atomicthumbs posted:

THE WORLD WONDERS

lol

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

hackbunny posted:

speaking of certificates: anyone knows of a CA that issues ECDSA certificates?
judging by how long some of them held on to sha-1 issuance, i think you'll be waiting a while. if any did, it would increase the level of complexity by offering more choices, and historically people don't do too well with more choices. plus if anyone got an ecdsa cert because they read it was higher security, and then put it on like their storefront domain they would get very unhappy with the ca when customers complain about being unable to shop

spankmeister
Jun 15, 2008






hackbunny posted:

speaking of certificates: anyone knows of a CA that issues ECDSA certificates?

Comodo :greencube:

spankmeister
Jun 15, 2008






Guys, I'm looking for that article on eavesdropping on microwave links with satellites. I think I was posted in this thread recently but I went back like 20 pages and couldn't find it. I'd appreciate a repost tia.

atomicthumbs
Dec 26, 2010


We're in the business of extending man's senses.
someone make a certificate thread so that the infosec people who actually know poo poo can go on for 40 pages about tls and i can read about interesting security fuckups in this one


spankmeister posted:

Guys, I'm looking for that article on eavesdropping on microwave links with satellites. I think I was posted in this thread recently but I went back like 20 pages and couldn't find it. I'd appreciate a repost tia.

i think i posted it in the infosec thread when they were talking about sigint

https://en.wikipedia.org/wiki/Aquacade_(satellite)

spankmeister
Jun 15, 2008






atomicthumbs posted:

someone make a certificate thread so that the infosec people who actually know poo poo can go on for 40 pages about tls and i can read about interesting security fuckups in this one


i think i posted it in the infosec thread when they were talking about sigint

https://en.wikipedia.org/wiki/Aquacade_(satellite)



Yeah that's it thanks.

cinci zoo sniper
Mar 15, 2013




looks like mirai's internet of poo poo is now mining buttcoins

fritz
Jul 26, 2003

theflyingexecutive posted:

the question I asked was "what's it called when you mix *1 and *2?"

i dont know what *1 and *2 are

flakeloaf
Feb 26, 2003

Still better than android clock

ammonium nitrate and fuel oil, let's say

need a :nsa: with a :tinfoil: on it

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

atomicthumbs posted:

THE WORLD WONDERS

Amazing

fishmech
Jul 16, 2006

by VideoGames
Salad Prong

hobbesmaster posted:

it wouldn't be gprs on Verizon; that'd be cdma 1x

random tangent: Verizon wants all cdma stuff off their network fast, with a complete shutdown of their cdma networks in the next couple of years

verizon will shut down their 2G cdma network by 2020 for sure, most other carriers will have their 2g networks shut down over the course of 2019 as well. (at&t has already started to shut down their 2g gsm network starting at the end of 2016 and it should be all gone by june)

when 3g cdma will get shut down is a different story. they originally wanted to go all lte by 2021 in statements 5 years ago, but it now seems that they'll only have 2g shut off by that point. it'll likely be 2025 or later before the big carriers start really shutting down 3g en masse

flakeloaf
Feb 26, 2003

Still better than android clock

atomicthumbs posted:

THE WORLD WONDERS

nice

hobbesmaster
Jan 28, 2008

fishmech posted:

verizon will shut down their 2G cdma network by 2020 for sure, most other carriers will have their 2g networks shut down over the course of 2019 as well. (at&t has already started to shut down their 2g gsm network starting at the end of 2016 and it should be all gone by june)

when 3g cdma will get shut down is a different story. they originally wanted to go all lte by 2021 in statements 5 years ago, but it now seems that they'll only have 2g shut off by that point. it'll likely be 2025 or later before the big carriers start really shutting down 3g en masse

they really want an LTE only network as soon as possible. of course that'll only occur after cat-m1 and nb-iot are deployed.

they're kinda ahead of their customers though. the latest hilarity was them saying that they were going to stop providing static IPv4 addressing in June. then they said "just kidding" when they realized they hadn't certified any modules for IPv6 static addresses

sprint claimed that they're keeping their cdma stuff around longer. good for selling out all the cdma radios lying around

surebet
Jan 10, 2013

avatar
specialist


cinci zoo sniper posted:

looks like mirai's internet of poo poo is now mining buttcoins

i'm the botnet subsidizing itself on a nickel a day

wolrah
May 8, 2006
what?

surebet posted:

i'm the botnet subsidizing itself on a nickel a day

Hey, if you're not paying for the power and have CPU time to spare, who cares if it's inefficient?

theflyingexecutive
Apr 22, 2007

fritz posted:

i dont know what *1 and *2 are

drugs

Adbot
ADBOT LOVES YOU

Cold on a Cob
Feb 6, 2006

i've seen so much, i'm going blind
and i'm brain dead virtually

College Slice

fritz posted:

i dont know what *1 and *2 are

pee and poop, respectively. hth op

  • Locked thread