Rayhunter: Findings and Updates

Okay, here’s a⁢ breakdown of the key facts from the provided text, focusing on the⁤ concerns ‍around surveillance ‍at protests and the capabilities of Rayhunter:

Main Concerns: ‍Surveillance at ‍Protests

* CSS (Cell-Site Simulators) are not ‍the primary concern: ‍The article argues that despite fears, there’s little⁣ evidence of CSS being actively used at protests. They suggest protestors⁢ should focus more on other, more readily available surveillance techniques used⁣ by law enforcement.
* Easier-to-Use Police Tools: ⁤ The text ⁤lists several tools police can use to identify and ⁤track protestors:
‍ * License Plate Readers (ALPRs): Track vehicles.
* Location Data brokers: Track phones via mobile advertising IDs (MAIDs). (Locate X, Fog Data‍ Science)
⁢ * Forensic Extraction Tools⁤ (Cellebrite): Download data from phones of arrested protestors.
⁤ * Geofence Warrants: Get identifiers of devices within a specific location ‍from internet companies ⁤(like Google).
⁢ * Facial Recognition ⁤(Clearview AI): Identify people from databases of faces.
⁣ * ‍ Tower Dumps: Get lists of phones connected to cell towers.
* Protective Measures are Similar: The actions needed to protect yourself from CSS are largely‍ the ⁢same as those needed to protect⁣ yourself from thes other surveillance methods. (Link provided to⁣ EFF’s security plan: https://ssd.eff.org/module/your-security-plan)

Rayhunter: A‍ CSS Detection Tool

* ⁣ Rayhunter’s Capabilities: Rayhunter is a tool designed to detect CSS activity. The authors have confidence in its detection engine.
* Testing: Rayhunter was tested against a commercial cell-site simulator (thanks ‍to Cape: https://cape.co) and successfully detected every attack.
* Detection in the Wild (Not at Protests): Rayhunter has detected potential CSS use, but these instances were not at protests:
⁣ *‍ Turks and⁣ Caicos Cruise Port: Data captured and shared⁢ online for review (https://github.com/ZeroChaos-/rayhunter-traces).
‍ * Chicago and New york: Reports of “IMSI ⁢Sent without authentication” signatures being triggered, suggesting CSS presence, but lacking further confirmation.
* Research Basis: Confidence in Rayhunter comes from⁤ research into⁤ how CSS‍ work⁣ (https://www.eff.org/wp/gotta-catch-em-all-understanding-how-imsi-catchers-exploit-cell-networks).

in essence, the article is a nuanced take on protest surveillance. It acknowledges the fear of CSS but argues ⁤that other⁢ surveillance methods are more prevalent and ⁣that rayhunter,while a useful tool,hasn’t shown widespread CSS use at⁢ protests.