Infosec

Protip: to avoid your phone being hijacked by rogue towers, you can go to the dialer on Android and type: *#*#4636#*#*

Then go into "phone information" and hit the dropdown to say "NR Only". This means only connect to anything via 5G. If you live in a more remote area you can enable LTE if you must, but NR Only is ideal. Everything else is danger.

SS7 hacking: Now so easy a Veritasium can do it 😆
https://youtu.be/wVyu7NB7W6Y?feature=shared

The main thing that reminded me to do this was the Veritasium video where they mention 5G handles a lot of the stuff that SS7 does.

This setting will definitely not stop the SS7 attacks shown in the video, but it will stop 2G/3G/4G attacks, which can listen and decrypt phone calls in some situations.

The bad actor basically sets up a fake cell phone tower and gets anyone nearby to connect with it. Modern protocols are generally pretty secure, so the first step is usually a "downgrade attack" where the rogue tower forces the targets to use a shittier protocol to extract more data. Setting your phone to only connect to 5G prevents this.

These are now generally referred to as "Stingray" attacks because that was the name of an old device that did this that got sold to a bunch of police departments, though there are much newer and better devices now. Often used to figure out who is at a protest, or monitor someone's movement at close range.

Building /bright-moments - minting onchain art IRL | /purple #15 | FID 129 #magikarp

The main thing that reminded me to do this was the Veritasium video where they mention 5G handles a lot of the stuff that SS7 does.

This setting will definitely not stop the SS7 attacks shown in the video, but it will stop 2G/3G/4G attacks, which can listen and decrypt phone calls in some situations.

The bad actor basically sets up a fake cell phone tower and gets anyone nearby to connect with it. Modern protocols are generally pretty secure, so the first step is usually a "downgrade attack" where the rogue tower forces the targets to use a shittier protocol to extract more data. Setting your phone to only connect to 5G prevents this.

These are now generally referred to as "Stingray" attacks because that was the name of an old device that did this that got sold to a bunch of police departments, though there are much newer and better devices now. Often used to figure out who is at a protest, or monitor someone's movement at close range.
https://warpcast.com/deanpierce.eth/0xad8a4a6b

Can you link to more information about the vulnerability?

ChatGPT isn't giving me great answers, but I tried to answer that question over here:
https://warpcast.com/deanpierce.eth/0xe623a31d

As to WiFi, enable DoH and force HTTPS everywhere and you should be good to go. Might fuck with your ability to log into captive portals at the airport/hotels etc, but meh.

This is great! Thank you!

Are you able to give any information on why this is safer? Is it common knowledge? Like, could I trust whatever answers chatGPT gives me if I ask it about it to learn more? 

Also do you have any resources for safely using public wifi?

Really wish Warpcast would let me select and copy that code into my phone instead of making me memorize it