Various useful Info about android-imsi-catcher-detector

[E3V3A]

@SecUpwN @xLaMbChOpSx
I'd like to have a place to add my development notes. Is there a way to do this here, that is not public, and in such a way that it is only accessible to our allowed developers?

[He3556]

@E3V3A i think in the free version there is no way to have a private area.
But I could set up a webpage with private area. I think the documentation is very important,too - and should be in a closed area

[SecUpwN]

@He3556, thanks for your offer to set up a separate webpage, but I'd like to keep everything AIMSICD related on our GitHub. I'm now researching a way to find a place here to add private developer notes. Will report back soon. @E3V3A, maybe creating secret GitHub Gists can be used? I just wrote a message to the GitHub support in order to find the perfect place. Thank you for your patience, folks.

[E3V3A]

@SecUpwN You're the king Github! Just wondering how the "forking" works on that, when set on secure. I guess we could also use a private pastebin or something as well...

[SecUpwN]

@E3V3A, hahaha.. hope you seriously mean it. 😄 I've received feedback from the GitHub developers and currently there seems to be no other way than making our GitHub private (and thus having to pay for it) - but this would be contradictory to open development. They were really happy to talk with me and kindly forwarded my suggestion of implementation to their programmers. What do you think of Gists?

EDIT: As for using a private Pastebin - here is a short overview of some of my bookmarks:

• PasteBay - Password protected, but bugging "Recent Posts" on left side
• PrivatePaste - Caution: Strange Terms & Conditions, not sure to recommend it
• CryptoBin - simple and clean, AES 256-bit encryption
• PrivNote - burn-after-reading feature, notification about read message
• PieBin - features client/sender password verification
• ZeroBin - burn after reading feature, AES 256 encrypted, discussion feature
• SharedPaste - burn after reading feature, AES 256 encrypted, discussion feature

WARNING: Please NEVER use PasteBin - it is not only willing to give up IP addresses to governments - but apparently has already given many IPs to at least one private security firm. They even hire hackers to find your most private stuff. Thank you. If you or @xLaMbChOpSx know of a better Pastebin-Service, let me know. Regarding the forking of Gists, here's their Help-Page. Hope it really helps.

[E3V3A]

Did you see this? Looks interesting App for intercepting API calls including IPC's.
https://github.com/iSECPartners/Introspy-Android
(I just found it.)

@SecUpwN Make sure we don't have any Qualcomm documents on our Github or we will get a DMCA takedown, they are really monitoring everyone here very closely. (But you know that already.)

@xLaMbChOpSx A few questions ...

1. How does the various AOSP based ROMs handle the HW dependent (proprietary) RIL libraries?
2. Are there any available AOSP sources for these?
3. Can you provide a link to where I should look for this?

As you can imagine, I'm thinking that the easiest way to get OEM_HOOK_RAW access to work, is by building our own binary/ies (like ipctool, qctool and radiooptions etc.) that our app can use by running it from shell.

[SecUpwN]

@E3V3A, rest assured I'll be watching every upload to this site and double-checking. Furthermore I must say that I really like the idea of having all necessary binaries build into AIMSICD. Gor for it!

[mspublic]

Hey All - Just wanted to let ya know - updated versions of Introspy-Android may be coming soon... as well as some other tools that could be of help to you

[SecUpwN]

@mspublic, thanks for telling us! Are you working for @iSECPartners?

[mspublic]

@SecUpwN - I no longer work for ISEC, nor does the original author of Introspy-Android. But we are working on a new and very improved version. Stay tuned.

[E3V3A]

@xLaMbChOpSx : I know I have asked this question before, and I know you have probably answered as well. But just to get it into my little brain, can you describe how AIMSICD was intercepting the ServiceMode info in the older version of the app? Is it using OEM_HOOK or IPC's or something else?

[SecUpwN]

@mspublic, quite interesting. What happened? Keep us up to date about your new tools, please. Although you might not have much time, you're very welcome to make improvements to our App! To be honest, I very much like that @xLaMbChOpSx is doing his very best coding 'till his hands are bleeding, but I certainly would like to have some people who'd be able to support him. If you have any good suggestions where to look for security-enthusiastic developers, please don't hesitate to let me know.

[E3V3A]

@xLaMbChOpSx @SecUpwN Could someone please update the build process Wiki?
https://github.com/SecUpwN/Android-IMSI-Catcher-Detector/wiki/How-to-build-the-AIMSICD

I'd like to start digging into that code... But need a bit of hand-holding to get a quick and painless start. From what I remember, I think xLaM said that he changed the IDE he used and the build process??

[E3V3A]

@SecUpwN @xLaMbChOpSx
Here's one public GSM tower DB, but I tested in my area, and the resolution is not very accurate, unless there's an antenna I cannot see at that location. Please test it you too.

http://cellphonetrackers.org/gsm/gsm-tracker.php

Pehaps we can ask to use the gsmmap DB or something else. Surely there must be some reliable and free BTS data out there somewhere.

[SecUpwN]

@E3V3A, thanks for sharing this website! Where does AIMSICD show the MCC? I guess I used the wrong MCC as my tests results indicate that I'm standing in the middle of Iran..

[E3V3A]

I'm closing this as it's not an issue and somewhat outdated.