Always strive to learn something useful. --Sophocles

The EFF releases Rayhunter, lets you see if cell tower spoofing is happening near you

2025-04-26T03:28:58Z

The Electronic Frontier Foundation has developed an open-source toolkit that, when installed in a very inexpensive portable hot spot, the device will report whether it sees any cell-site simulators (CSS) in your area.

CSS devices, also known as Stingrays, allow law enforcement to capture all identifying information in an area with great precision. It is blanket surveillance. The problem is that while they may have a warrant to surveil Suspect X, they don't have warrants to surveil and capture information on me, you, and everyone around us. Stingrays capture everyone's location information in their effective operating range and logs it. Also, we know very little about how these devices operate: this info is kept under very tight lockdown by the manufacturers and by the law enforcement agencies. There has been very little success in law suits filed to pry this information into direct sunlight.

Some CSS units can go beyond locating the suspect's phones and actually intercept communications. Whether they can intercept everyone's comms who it has sucked into connecting to it isn't known.

The concern is whether CSS is being used to surveil protests and religious gatherings, things that are protected by the First Amendment. There is some evidence that points to this, it is not known how widespread such surveillance may be.

This new toolkit by the EFF is called Rayhunter, i.e. hunting for stingrays. It requires the purchase of an Orbic WiFi hotspot, links in the article to Amazon and eBay show them available for $10-20. The software to turn the Orbic into a Rayhunter is available on the EFF site, but you must be running Linux or Mac OS to install it - no package for Windows at this time. I suppose you could probably run a Linux VM on Windows to install it that way. Once installed and running, in the presence of CSS a red line will appear on the top of the display and the event will be logged, otherwise a green line will show. Connecting to the device's browser will let you review the log file.

The device is not a counter-surveillance tool, it does nothing to interfere with CSS which would be against many FCC rules and probably against local and Federal law. The EFF believes that the Rayhunter is legal under U.S. law, but if you're not in the USA then you should talk to an attorney in your area to see what kind of risk that you might be taking.

Myself, I'd look into rehousing it into something else, like, say, a Gameboy box that also works as a Gameboy, as eventually The Powers That Be will be looking for people carrying this particular model of Orbic devices and plausible deniability might begin running thin. For the paranoids amongst us, perhaps having a tamper switch on the Gameboy that would fry the memory if it's opened incorrectly.

https://www.eff.org/deeplinks/2025/03/meet-rayhunter-new-open-source-tool-eff-detect-cellular-spying

comments

Appeals court upholds free public access to laws and regulations

2023-10-29T17:20:52Z

This is a VERY important case! A guy founded a website, public.resource.org, and began posting public laws, rules, and regulations that were passed and codified. Things like electrical regulations, etc.

Naturally he got sued by trade organizations that published these rules and made lots of bucks! Can't have people giving away our bread and butter!

Last month an appeals court confirmed an appeal of a 2022 decision upholding the site's right to publish this information.

From the EFF post: "As part of its mission of promoting public access to all kinds of government information, Public Resource acquires and posts online a wide variety of public documents, such as nonprofits’ tax returns, government-produced videos, and standards incorporated into law by reference. These standards include electrical, fire safety, and consumer safety codes that have been mandated by governments. But without Public Resource’s work, they are often difficult to access, much less share with others, which means that areas of law that profoundly affect our daily life are obscured from our view. Even courts have had trouble accessing the laws that they are supposed to apply.

The American Society for Testing and Materials (ASTM), National Fire Protection Association Inc. (NFPA), and American Society of Heating, Refrigerating, and Air-Conditioning Engineers (ASHRAE) are organizations that develop private sector codes and standards aimed at advancing public safety, ensuring compatibility across products and services, facilitating training, and spurring innovation.

ASTM, NFPA, and ASHRAE sued Public Resource in 2013 for copyright and trademark infringement and unfair competition."

It's nice to know that we do sometimes get our tax dollars worth, though sometimes it takes quite the fight for it to happen.

I might be able to use this as a source at my library. I've had requests for legal citations, and we don't have the material. THIS might have it! Definitely worth looking in to. And some of those nonprofit tax returns could also be interesting reading.

https://www.eff.org/press/releases/appeals-court-upholds-publicresourceorgs-right-post-public-laws-and-regulations

https://yro.slashdot.org/story/23/09/17/1647253/public-resource-wins-2012-case-judge-rules-posting-regulations-online-is-fair-use

comments

NY District Court Judge holds that warrants are required for border cell phone searches!

2023-05-31T13:40:16Z

Of course there's the 'absent exigent circumstances' clause inserted, always gotta have that. Regardless, huge step forward for privacy.

This is both complicated and simple. The simple part is that the government has a reasonable interest in preventing some things from entering the country, like drugs, undeclared/untaxed items, etc. But at the same time, our phones have become digital repositories of our lives, and even though it is not a declared constitutionally-protected value, we do have some legal rights to privacy.

From the article: "Just as in Riley, the cell phone likely contains huge quantities of highly sensitive information—including copies of that person’s past communications, records of their physical movements, potential transaction histories, Internet browsing histories, medical details, and more … No traveler would reasonably expect to forfeit privacy interests in all this simply by carrying a cell phone when returning home from an international trip."

Apple introduced a feature in the previous(?) version of their phone operating system that disables the interface port and the facial recognition unlock to tighten security. It is recognized that the government has to go through great lengths to compel you to produce something you know - a password or passcode - versus something you posses - a key to a lockbox or your fingerprint or face, being the key to your phone. By disabling these, your phone is much harder to access since the phone will wipe itself after X number of failed attempts. I believe Android has something similar, but I'm not familiar with their specifics.

A lot of people would simply wipe their phone before re-entering the USA, then reload their contacts from an iCloud backup once they're past Customs and restore everything once they're back home to avoid such things.

A second part of the article is also quite interesting: The court focused on the internet and cloud storage, stating: “Stopping the cell phone from entering the country would not … mean stopping the data contained on it from entering the country” because any data that can be found on a cell phone—even digital contraband—“very likely does exist not just on the phone device itself, but also on faraway computer servers potentially located within the country.” This is different from physical items that if searched without a warrant may be efficiently interdicted, and thereby actually prevented from entering the country."

But I'm not sure what this means for potential laptop searches and siphoning. Best to use solid full-disk encryption and a BIOS password if you're at all concerned about your laptop contents.

https://www.eff.org/deeplinks/2023/05/federal-judge-makes-history-holding-border-searches-cell-phones-require-warrant

https://yro.slashdot.org/story/23/05/31/0439200/federal-judge-makes-history-in-holding-that-border-searches-of-cell-phones-require-a-warrant

comments