Android IMSI-Catcher Detector

Hello, everyone! Since Google does not seem to be interested in fixing the huge security hole of not showing a ciphering indicator on Android, it appears as if they get paid (or are forced to) not fix it. For all of you that are sick of getting spied on through IMSI-Catchers, Silent SMS and alike and want to do something about it, here&#x27;s a great project you should check out: &quot;The Android-IMSI-Catcher-Detector&quot; (AIMSICD). It is an Android open-source based project to detect and (hopefully one day) avoid fake base stations (IMSI-Catchers) or other base-stations (mobile antennas) with poor&#x2F;no encryption.<p>This project aims to warn users if the ciphering is turned off and also enables several other protection-mechanisms. Since it is under constant development, they are constantly searching for testers and security-enthusiastic developers with balls. Don&#x27;t be shy, feel free to contribute, in any way you can on GitHub: <a href="https://github.com/SecUpwN/Android-IMSI-Catcher-Detector" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;SecUpwN&#x2F;Android-IMSI-Catcher-Detector</a>

You probably shouldn&#x27;t put the EFF, Guardian Project and Privacy International logos so prominently on your website if you are not affiliated with or supported by those projects.

This reminds me of the early days of GSM where Nokia phones showed a broken lock icon if the air interface between the mobile phone and the base station did not use encryption. At the time at least France had disabled the encryption and the indicator caused some interesting discussions.

Display which cipher is being used?<p>2G is insecure regardless of whether encryption has been turned off or not, it can be decrypted on the fly with very modest hardware so the indicator telling you what connection you have is as good as telling you whether it is &quot;secure&quot; or not.<p>&gt; Detect hidden SMS<p>Not really feasible - there are tons of different types of &quot;hidden&quot; sms that are routinely used by the network but can be spoofed by a third party.<p>&gt; Detect SIM card app installations through public APIs<p>This won&#x27;t work unless it is rooted and this messages have to be signed from the network anyway.

It seems only 2G connection is crackable. Are we safe as long as the device is on 3G&#x2F;4G network? We should just disable cellular radio when you see the device is on 2G suspiciously in the middle of city(around demonstrations, I suppose)

IMPORTANT: We&#x27;re actively searching for skilled DEVELOPERS. Chime in!

Great project! Will follow this and share the GitHub link.

This sounds like such a good idea, I think the US government will outlaw it.

Any chance you could quiet the headline a bit? I recognize you have a good project but that title&#x27;s awfully loud.