←back to thread

LTESniffer: An Open-Source LTE Downlink/Uplink Eavesdropper

(github.com)
256 points transpute | 2 comments | 22 Oct 24 00:42 UTC | HN request time: 0.404s | source
Show context
wkat4242 ◴[22 Oct 24 03:00 UTC] No.41910794[source]▶
Too bad the hardware for this is eyewateringly expensive :'(
replies(6): >>41910955 #>>41911076 #>>41911108 #>>41911306 #>>41911470 #>>41911593 #
HeatrayEnjoyer ◴[22 Oct 24 06:01 UTC] No.41911593[source]▶
True? How are phone modems inexpensive?
replies(4): >>41912014 #>>41912121 #>>41914230 #>>41914861 #
paweladamczuk ◴[22 Oct 24 07:28 UTC] No.41912014[source]▶
I'm wondering the same thing.

Can someone outline the architectural limitations of using a smartphone modem for such network debugging/sniffing tasks?

replies(1): >>41913046 #
wkat4242 ◴[22 Oct 24 10:53 UTC] No.41913046[source]▶
Smartphone modems (baseband) are super optimised for battery life. They don't send any traffic that isn't meant for the device itself on to the CPU. That would only cause unnecessary load.

They could perhaps be modified to do that but the baseband firmware is usually very closed source.

There is only one example I know, there was one particular dumbphone from the 2G era for which the baseband sourcecode was available due to a hack. You could use several (one for uplink and one for downlink) of these with modified firmware to sniff 2G traffic. I forget which model it was exactly but obviously the price ballooned on eBay :)

Haven't heard of this happening with later models. Baseband sourcecode firmware is really rare.

replies(3): >>41913546 #>>41914178 #>>41914398 #
beeboobaa3 ◴[22 Oct 24 14:03 UTC] No.41914398[source]▶
> Haven't heard of this happening with later models. Baseband sourcecode firmware is really rare.

You know what they say. "If you have nothing to hide, you have nothing to fear"

So I wonder what they're trying to hide from all of us. Probably all the backdoors and glaring security issues.

replies(1): >>41915032 #
1. transpute ◴[22 Oct 24 15:07 UTC] No.41915032[source]▶
https://hackaday.com/2022/07/12/open-firmware-for-pinephone-...

> With the PinePhone modem.. It was quickly found that the Quectel modem ran a stripped down version of Android on its ARM core, with adb shell available over the modem’s USB interface. When a few adventurous hackers started probing it and got shell access, they found tools like ffmpeg, vim, gdb and sendmail compiled in – certainly not something you’d need on a cellular modem, but hey.

replies(1): >>41916007 #
2. seba_dos1 ◴[22 Oct 24 16:31 UTC] No.41916007[source]▶
EG25 is an IoT modem and those tend to expose some extra functionality such as HTTP clients or TTS synthesis over AT commands. Some even document how to compile and run software on them - though of course it's only about the application CPU and not the actual modemy stuff that runs on separate DSPs with proprietary signed Qualcomm firmware.

Most (all?) standalone modems are basically screenless smartphones/SBCs with integrated modem these days.