Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
mastodon.green is one of the many independent Mastodon servers you can use to participate in the fediverse.
Plant trees while you use Mastodon. A server originally for people in the EU, but now open for anyone in the world

Administered by:

Server stats:

1.2K
active users

mastodon.green: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#imei

1 post1 participant0 posts today
Public *
Kevin Karhan :verified:

@landley @jschauma @ryanc @0xabad1dea yeah, the exhaustion problem would've been shoved back with a #64bit or sufficiently delayed by a 40bit number.

Unless we also hate #NAT and expect every device to have a unique static #IP (which is a #privacy nightmare at best that "#PrivacyExtensions" barely fixed.)

  • I mean they could've also gone the #DECnet approach and use the #EUI48 / #MAC-Address (or #EUI64) as static addressing system, but that would've made #vendors and not #ISPs the powerful forces of allocation. (Similar to how technically the #ICCID dictates #GSM / #4G / #5G access and not the #IMEI unless places like Australia ban imported devices.

I guess using a #128bit address space was inspired by #ZFS doing the same before, as the folks who designed both wanted to design a solution that clearly will outlive them (way harder than COBOL has outlived Grace Hopper)...

If I was @BNetzA I would've mandated #DualStack and banned #CGNAT (or at least the use of CGNAT in #RFC1918 address spaces) as well as #DualStackLite!

Replied in thread
Public *
Kevin Karhan :verified:

@bob_zim @micahflee @heiseonline @golem Makes sense.

  • After all, the whole #IMSIcatcher system can be detected by passive #SIGINT as it's an active attack on mobile networks.

I wounder if I can get a compatible device in #Germany as well...

  • Bonis points if that device has a freely reprogrammable #IMEI to allow hiding it's identity.
List of useful things. Contribute to greyhat-academy/lists.d development by creating an account on GitHub.
GitHublists.d/imei.devices.list.tsv at main · greyhat-academy/lists.dList of useful things. Contribute to greyhat-academy/lists.d development by creating an account on GitHub.
#imei
Public *
Kevin Karhan :verified:

@phlogiston @torproject @guardianproject at least @BNetzA & @Bundesregierung didn't cancel #2G / #GSM / #EDGE with the #3Gshutdown like #Australia did recently.

Infosec.SpaceKevin Karhan :verified: (@kkarhan@infosec.space)And don't even get me started on #VoLTE [support](https://www.youtube.com/watch?v=Q6qb9dml6So)... - Like #Australia had *the glorious idea* of shutting down #3G *AND* #2G as well as *#allowlisting* [only specific](https://www.youtube.com/watch?v=RPlTz-3estM) #IMEI|s, [banning > 500k devices](https://www.youtube.com/watch?v=zIJavqEzEIw) for no good reason. Also *most* #VoLTE / #Vo5G - devices *explicitly use #2G / #3G for #EmergencyCalls! - Which is *#funfuckingtastic* in a place like Australia where *basically everything in nature conspires to hurt or kill humans*! #DownUnder #AUSpol #AUpol #tech #2Gshutdown #3Gshutdown #EmergencyCalling
#volte#importphones#imei
Replied in thread
Public *
Kevin Karhan :verified:

@tauon

1) #CloudAct is just #CyberFacism, look it up!
en.wikipedia.org/wiki/CLOUD_Act

-

2) @signalapp 's #Server code is proprietary and since it's centralized we can't trust that the code they release is what's running on their backend!

-

3) #Signal still demands #PhoneNumbers which are #PII either by association (#Number => #ICCID = #SIM = #IMSI => #IMEI => Location Data as I explained beforetwice) or mandatory #KYC / #ID requirements (even on prepaid cards), which an increasing amount of juristictions do...

-

But don't take my word for it.
youtube.com/watch?v=tJoO2uWrX1M

en.wikipedia.orgCLOUD Act - Wikipedia
#shitcoin#scams#mobilecoin
Public
Kevin Karhan :verified:

@lucasmz @Avitus @david_chisnall the benefit of #XMPP+#OMEMO is that there are several providers, including free options...

All #PII incl. #PhoneNumbers can and will be abused by existing governments and if users don't pay, then they are the product and their data is the one to be sold.

After all, you have the same cost problem with phone numbers. Even if one doesn't pay per line/number and never pay for calls and texts, they still have to top it up to extent validity.

  • And again: It's way easier for a government to demand an ID for a #SIM that works in networks around their country (i.e. #Turkey demands registration on a per-#IMEI - basis *with #ID) than to tunnel XMPP+OMEMO through @torproject over #EDGEland-speed #2G networks.

Plus you relying an unfixably insecure #Telephony makes a system inherently unsafer than it needs to be...

  • This is how people get caught!

Also #Signal is able and willing to use said PII to restrict and ban users and if I were some dissident in Cuba or North Korea or even just Eritrea or Yemen I'd not rely on non-enforcement of #OFAC / #USML / #ITAR since Signal can obviously distinguish & identify accounts by virgue if their #PhoneNumber!

  • Always think "How can this be weaponized against someone?" when it comes to #privacy!
GitHublists.d/xmpp.servers.list.tsv at main · greyhat-academy/lists.dList of useful things. Contribute to greyhat-academy/lists.d development by creating an account on GitHub.
#privacy
Continued thread
Public *
Kevin Karhan :verified:

And don't even get me started on #VoLTE support...

Also most #VoLTE / #Vo5G - devices *explicitly use #2G / #3G for #EmergencyCalls!

  • Which is #funfuckingtastic in a place like Australia where basically everything in nature conspires to hurt or kill humans!
YouTubeCarriers are Killing 4G & 3G Devices - Your 4G Phone May Soon Stop WorkingBy Hugh Jeffreys
#DownUnder#AUSpol#AUpol
Public *
Kevin Karhan :verified:

[#TLDR: JUST TELL ME IF YOUR TABLET CAN DO #CALLS!]

#DearVendors of #Android-#Tablets:

Off all the #Functions you can put into a #Specifications Sheet of your Devices there's one you should ALWAYS answer clearly on your #Website:

DOES YOUR TABLET [with #4G / #5G / …) SUPPORT MAKING PHONE CALLS?

Like: IS IT TOO MUCH TO ASK TO HAVE THAT INFO IN THE SPECSHEETS?

You're obviously able to list all the #Codecs natively supported and the user-available storage as well as supported Frequency Bands, WWAN modes, WiFi channel width and the Display Glass vs. Panel dimensions including DPI of the latter and whether or not it has a hall effect sensor to detect your overpriced 1st party tablet covers!

Now some folks may ask: "WHY does this matter?" or outright dismiss this as a problem.

Listen:
Not everyone is able or willing to carry two devices when 1 SHOULD BE ENOUGH and also some places (i.e. #Turkey) have #ImportRestrictions re: #MobileDevices, so having more than 1 #IMEI is already a "NOPE!" by the authorities.

  • Also this isn't something one can "fix" post-purchase like installing #VLC to decode some obscure file format in Software: Either the #Baseband and #ROM support #PhoneCalls or they don't!

So why do NONE of the #Tablet manufacturers allow to #search or #filter for that???

NO, instead one has to download an obscenely huge #PDF just to then read on page 34 that for any "#telephony" function you NEED YET ANOTHER DEVICE FROM THE SAME MANUFACTURER AND HAVE TO SIGNUP WITH AN ACCOUNT and even that level of #abuse WON'T GUARANTEE THAT IT WORKS...

  • I mean, come on, this ain't some obscure functionality like #OMAPI to do some "evil sourcery" like managing an #eSIM that is in a #SIM-Card form factor!

Pretty shure A LOT of other folks have the same question and ain't willing to get yet another device & #SIM just to recieve the occasional call because #TechIlliterates can't be assed to send an #eMail or learn #XMPP+#OMEMO to message one...

  • Obviously they same manufacturers are able and willing to specify f-stops of the built-in cameras and list EVERY SINGLE #WEARABLE they made and certify as 'compatible' with, as if anyone is gonna take their non-#waterproof #Tablet for a marathon or god forbid triathlon...
Photo of a disappointed looking Elementary School aged boy with the tag line: "WHEN YOU ASK SOMEINE A BOOLEAN QUESTION AND THEY RETUN A STRING"
#Rant#TechSupport#Technology
Public
Kevin Karhan :verified:

@ada yeah, but then again Oz is ruled by #TechIlliterate #Wankers who decided to not only shutdown both #2G & #3G but literally #ban #importPhones and basically lock-out any device that desn't do #VoLTE their way...

And yes, they enforce that like #Turkey enforces people to register imported devices 30 days after import:

So if you are i.e. a #Tourist in #DownUnder and you got some serious issue, you can't even call their emergency services on 000 cuz your devices got yeeted off the network through no fault of your own!

YouTubeAustralia Blocked Internationally Purchased 4G/5G Phones As Part of 3G Shutdown - Starting 28th OctBy Hugh Jeffreys
Public
Kevin Karhan :verified:

Seriously, #Australia's #2G & #3G #Shutdown and #IMEI-based #Blocklisting WILL inevitably kill people

And the only "tool" there is is #Telstra's Website and just teting random IMEIs only yields two possible results:

  1. 'We don't know this device at all'

  2. "'We've not blocklisted it'*

Even when testing it with obvious #2Gonly & #3Gonly devices that certainly don't support #VoLTE...

YouTubeAustralia’s New Firewall IMEI BLOCKED 516,875 Active Phones Overnight + Tourists Phones BlockedBy Hugh Jeffreys
#GreatFirewallOfAustralia
Replied in thread
Public *
Kevin Karhan :verified:

@halva @lynn @signalapp @deilann

The problem is one needs to literally acquire a phone number and have access to it, and the demand of a phone number itself is bad. This makes it unnecessarily complex and expensive compared to using @monocles / #monoclesChat.
(Cuz if I've to pay to communicate, I might just choose a provider that isn't a #VC #MoneyBurningParty but a long-term sustainable solution based off #OpenStandards!)

  • I'm sorry for your location. My sincere condolences!

Still, #Signal doesn't allow #SelfCustody of all the keys & #SelfHosting, which makes it vulnerable as a #proprietary #centralized, #SingleVendor & #SingleProvider solution.

And with #CloudAct on one hand and #Trump wanting to "Speedrun Hitler", I'd not rely on Signal.

  • The "Metadata" #FUD is just a marketing bs because Signal will comply with warrants, whereas nothing prevents me from buying a Thin client, setting up an #OnionService to tunnel everything over @torproject / #Tor and rig it to disconnect power if tampered with or upon command.

I have setup comms for critical operations (incl. helping people flee Russia!) and I'd rather choose #OnionShare over #Signal if #Metadata is a real concern.

  • Internet Access, even in "P.R." #China, is something feasible to workout given the massive prevalence of public #WiFi. Also it's easier to spoof/anonymize a MAC than an #IMEI or even #IMSI, so making one dependent on #PhoneNumbers to even sign up is inherently bad!
Twitterthaddeus e. grugq on Twitter“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”
#china#wifi#imei
Public
TecnoArunda

Si tienes un #iPhone y se queda Buscando... o ves que la SIM no la detecta, prueba a marcar en el teclado numérico el código *#06#

Si no te sale el número de #IMEI es porque la CPU no se puede comunicar con la CPU de Radiofrecuencia y es altamente probable que tengas una avería a nivel de placa base, requiriendo que un técnico especializado en reparaciones de placa base lo repare.

Si te sale el IMEI habría que ver si la tarjeta SIM está bien, si no hay antenas rotas o se ha desconectado algo.

Replied in thread
Public
Kevin Karhan :verified:

@quokka1 @GrapheneOS I sincerely doubt the #regulators will do much about it and I assume that like with #Turkey (aka. #Türkiye):

Restricted imports of one Device (as per IMEI!!!) per person and year (every entry is counted even if you leave with the device!) and automatically bans them after 30 days of #Roaming across all networks until one #KYC's with a Turkish National ID at a #Türkcell Store in person results in a literal "#BlackMarket" for domestically sold, cheap prepaid phones by said carriers just to take their #IMEI and flash it onto the #Baseband of an #imported #Smartphone to circumvent that garbage.

  • Basically the inverse of what people do in places like #Thailand and #Germany where KYC is mandated even for #Prepaid cards and they just import a SIM from neighbouring countries.
#Thailand#germany#prepaid
Continued thread
Public *
skua

Part VI

Look on Youtube and found a free site that generates an unlock code for my phone for free.

Even installed #Linux #JailFire, a #Sandbox to run #Firefox in, as I thought the website might be a problem.
(I'm such a #CodingGod. cough cough)

Just about to hand over my #IMEI, phone number and location when some intelligence seeped in through one of the cracks and I thought "Hmmm, this information, should I be giving it to #GodKnowsWho?"

The web speaks. Looks like I shouldn't.
#IDTheft

Public
HistoPol (#HP) 🏴 🇺🇸 🏴

@mina
Das ist der wichtigste Part.
Deshalb auch keine #Meta-, #MS- und #Apple-Produkte nutzen. Gleiches gilt für #Google. Alle verknüpfen sich, sofern sie das OS darstellen, mit deiner Handy-#IMEI, ist mein Verständnis. (#HP und #MS sind den analogen Weg gegangen, zumindest mit neueren #OMEN-Gaming-Laptops).
Was bleibt sind meines Erachtens #DeGoogled-Smartphones und totale Exoten mit #Linux, von denen mit viel Aufwand @SilviaMarton mal eines gehabt hat.(?)

@si_irini @evelynefoerster @2ndStar

ExploreLive feeds
About