Hacker News new | ask | show | jobs
by acqq 3811 days ago
"IMSI catcher" is a device:

https://en.wikipedia.org/wiki/IMSI-catcher

It doesn't have to "verify" what it collects.

1 comments

Yes, but the value of the collected data is much reduced if you can't distinguish between legitimate IMSIs and spoofed IMSIs of devices that were never actually there.
No, because he who collects isn't interested in random mobile phones, and whoever tries to spoof "other" phones doesn't know the phones of interest of the collector. And the collector is interested not in knowing the presence but in the whole traffic, so the spoofing is even more obvious.
If you attach to a network successfully, it means the its secret key stored in the SIM card matches that of the network.

Since your IMSI catcher is basically just a proxy between the mobile phone and the real network, you can therefore easily detect that the IMSI is who it says it is.