I'm not sure about the StingRay brand per se, but it's likely that malicious fake cell towers can pwn the baseband radio. And we know that the baseband radio is privileged over userland.
Also, baseband firmware is totally black box, so we have no clue what its capabilities are. So the safest bet is isolating it in a subsystem, or better in a separate device, which can be firewalled.
Also, baseband firmware is totally black box, so we have no clue what its capabilities are. So the safest bet is isolating it in a subsystem, or better in a separate device, which can be firewalled.
https://www.osnews.com/story/27416/the-second-operating-syst...