Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Changing LAC with zero location? #606

Closed
znakeeye opened this issue Aug 20, 2015 · 17 comments
Closed

Changing LAC with zero location? #606

znakeeye opened this issue Aug 20, 2015 · 17 comments

Comments

@znakeeye
Copy link

Not sure how to interpret this, but I keep getting "Changing LAC" events with Lon=0.0 Lat=0.0 Accu=0. This happens all the time when I'm visiting an area were I have actively used the app before.

Sure looks like unassigned values, causing an erroneous event?

@TPS
Copy link

TPS commented Aug 21, 2015

@znakeeye Just FYI, you're more likely to get a positive response from the dev team when you follow https://github.com/SecUpwN/Android-IMSI-Catcher-Detector/wiki/Submitting-Issues .…

@znakeeye
Copy link
Author

Well. I thought I did. Are you saying that this is a known issue?

@TPS
Copy link

TPS commented Aug 23, 2015

@znakeeye I'm referring to

❗ SAFETY FIRST: Remove your IMEI, IMSI and phone number from dumps you submit!
In all cases, you MUST include the following:

AIMSICD version (see the About-Tab within our App)
Your exact FW specification (ROM, AOS API, etc.)
Your exact HW specification (processor, model number, etc.)
The output of getprop command to a Pastebin-Site (recommended: PIE-Bin)
❗ Logcat dump (press button Debugging in Navigation Drawer)
Feel free to attach any other logs made by CatLog or Logcat Extreme

which all seems conspicuously absent from your report.…

@SecUpwN
Copy link
Member

SecUpwN commented Aug 24, 2015

Welcome to our project, @znakeeye! We're sorry to hear you're experiencing this, but I can confirm what you see. I guess that this is likely a bug in the database, which still has glitches. @banjaxbanjo would you please have a look at this? @TPS, thanks for telling everyone to file proper bug reports, but please refrain from that in the future. This is my part and I would like to avoid ticking off our users. ;-)

@E3V3A
Copy link
Contributor

E3V3A commented Aug 24, 2015

TPS is right. The bug report is simply to vague without more info...

@ghost
Copy link

ghost commented Aug 24, 2015

@SecUpwN @znakeeye I'd need a log to tell if this is a bug or not, and if you say that this only happens in a particular zone than maybe when you where monitoring the zone there was an imsic active using the bts cid and if you went back few days later than the original lac and cid would be active and the new lac would cause an alert.

The gps coors don't have any affect on lac detection so having lat 0 and lon 0 won't set off false alarm.

Simplest thing to do is look at the bts in db viewer and see is there 2 cids with different lacs and if so than its not a false alarm.

@znakeeye
Copy link
Author

What if there is a CID = -1?

@znakeeye
Copy link
Author

"is there 2 cids with different lacs and if so than its not a false alarm."

You mean two log entries with identical CID and different LAC?

@E3V3A
Copy link
Contributor

E3V3A commented Aug 25, 2015

@znakeeye

You mean two log entries with identical CID and different LAC?

Yes.

This happens all the time when I'm visiting an area were I have actively used the app before.

Previously using the app, doesn't prevent changing LAC detection. LAC detection is not fully re-implemented after DB overhaul (AFAIK), since we still need to rework some DB queries.

@E3V3A E3V3A closed this as completed Aug 25, 2015
@ghost
Copy link

ghost commented Aug 25, 2015

@E3V3A from test I done changing lac is working,to test all you have to do is put a demo entry into the db with a know cid and a random lac and when it detects the real cid and lac it will alert.

@E3V3A
Copy link
Contributor

E3V3A commented Aug 25, 2015

@banjaxbanjo Awesome and thanks for testing!

@znakeeye
Copy link
Author

No, there has to be a bug in the works. I looked through the Unique BTS Data and found at least two entries that could be the reason I'm seeing this (presumably) false alarm:

CID: -1
LAC: 0

Then...

CID: -1
LAC: 12345 (scrambled)

So where does this "-1" come from?

@ghost
Copy link

ghost commented Aug 30, 2015

The Lac with 12345 and cid 54321 is the demo inserted for example but if a cid -1 and lac of 12345 showed up than I find that strange. And also a LAC with 0. Maybe this is an android OS thing because I've logged a cid and lac of 0xffffffff before in a demo app and I notice that for a split second when changing to new bts that these values show . @E3V3A would a phone connect to a bts if the cid was -1? I think I've read somewhere that imsicatchers might use values like 0 before.

@znakeeye
Copy link
Author

My lac was not 12345. I wrote it to avoid showing the actual lac to the rest of the world :P

Cid: -1
LAC: five arbitrary digits here :)

@ghost
Copy link

ghost commented Aug 30, 2015

Ah silly me😁well it appears to be a bug but I don't think the app is the cause I think its android OS giving back these values. I guess we need to filter out -1 when comparing lac. But besides that it looks like the lac detection is working good

@ghost
Copy link

ghost commented Aug 30, 2015

@ga900 from your experience is it possible an imsi catcher can use 0 or -1 for lac or cid and would a phone connect to a imsic if it used those values?

@E3V3A
Copy link
Contributor

E3V3A commented Aug 30, 2015

No it's not possible

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants