search

CellularPrivacy / Android-IMSI-Catcher-Detector

AIMSICD • Fight IMSI-Catcher, StingRay and silent SMS!
https://cellularprivacy.github.io/Android-IMSI-Catcher-Detector/
GNU General Public License v3.0
4.65k stars 940 forks source link

README! The future and continued survival of AIMSICD #926

Open E3V3A opened 7 years ago

E3V3A commented 7 years ago

It has come to my attention that apparently AIMSICD has become even more popular the less it works.

I will say the following not out of disrespect for the many contributors and all the hard labor put into this app, to try to make it work, but as an honest recommendation to all developers here, still thinking this will happen. As it stands right now, it simply will not! And it hasn't worked for the last 2 years (when I left the project), and probably never will unless there is a radical change in matters.

It seem that no one at the CellularPrivacy organization is able to maintain this? SecUpwN lost his account? OpenCID is closing down. The DB is totally broken and useless from all development aspects. The app is bloated with eye-candy, obscure and useless functions and libraries. The translation integration is bloating the commit history to the point its impossible to follow any valuable coding whatsoever.

However, due to recent world political changes and the extremely easy access to SDR home-brew IMSI catchers and constant 2FA hacks using mobile network MiTM techniques. This app is indeed still needed, especially for a wider hardware spectrum. So I am reconsidering to revive my interest in this development effort. BUT

Thus, IFF (If and only if) I am to venture into the revival of this app, it will have to be under the following conditions.

What does all this mean?

It means that:

Anyway, this is just a suggestion that I have not yet decided on. But it is for sure the only condition I would accept, in order to continue on this project. Feel free to burn me or support me. I happy to hear your opinions either way.

Gnashspike commented 6 years ago

"...the last thing any DEVELOPER wants to do is babysit..."

objectorange commented 6 years ago

I'm desiring to embed this in another android app that includes I2P & TOR and would really appreciate it the primary core functionality devoid of UI was its own library with an API. This will definitely help this app's userbase grow.

vrobolab commented 6 years ago

Please provide a direct Bitcoin address for donations, for people not willing to register on bountysource.com

E3V3A commented 6 years ago

@objectorange

I'm desiring to embed this in another android app that includes I2P & TOR and would really appreciate it the primary core functionality devoid of UI was its own library with an API.

Hi Brian, That is the exact purpose of AICD (pronounced "acid"), but due to lack of developer motivation and financial means, that project its still latent. If you can find us at least 2 active developers, I'd be happy to get myself involved again. We now have all the pieces, experience and knowledge to make this happen, including a very clear development strategy and time frame required. A realistic estimate for the development time for this (with 3 active people) would be approximately 1 month, for a working beta. That is, if we start today, a new beta on 1 January! Cheers, E:V:A

@vrobolab Since bitcoin wallet owners and address/transfer info has been leaked [edit: compromised], we stopped using bitcoins and are moving toward a more secure currency, like Zcash or Monero. Expect me to publish our new addresses within a week.

vrobolab commented 6 years ago

due to lack of developer motivation and financial means

How much funding you require?

bitcoin wallet owners and address/transfer info has been leaked

More info on this please.

E3V3A commented 6 years ago

@vrobolab

How much funding you require?

Enough to pay 2 full time developers for 2 month of work.

More info on this please.

Coinbase cryptocurrency broker loses bid to stop US tax probe and same.

The IRS persuaded Corley last year to order Coinbase to approve its summons for customer records from a three-year period for an investigation into whether taxpayers failed to report income.

Coinbase resisted, and negotiations between the company and the agency resulted in a narrowed request for information to about 8.9 million transactions and 14,355 account holders. Coinbase argued at a Nov. 9 hearing the inquiry remained unreasonably broad.

Corley ruled that the company must turn over basic identifying information, records of account activity and period statements for accounts with the equivalent of $20,000 in any one transaction type during any single year from 2013 to 2015. The judge said other data need not be disclosed at this time, including public keys for all accounts, wallets and vaults.

Although this doesn't constitute a "leak", it does significantly increase the risk of such events. We all know how good the US gov't are at keeping private data private.

vrobolab commented 6 years ago

Enough to pay 2 full time developers for 2 month of work.

Approximate amount? I could be able to fund it.

Coinbase bla bla

whitetornado commented 6 years ago

any update about this??

ajvsol commented 6 years ago

@E3V3A how about deciding on a crowdfunding method if there's no volunteers available? Decide on Patreon/Kickstarter/Bountysource and ping this issue with the link.

whitetornado commented 6 years ago

I am in

Op wo 23 mei 2018 17:54 schreef neomodern notifications@github.com:

@E3V3A https://github.com/E3V3A how about deciding on a crowdfunding method if there's no volunteers available? Decide on Patreon/Kickstarter/Bountysource and ping this issue with the link.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector/issues/926#issuecomment-391399575, or mute the thread https://github.com/notifications/unsubscribe-auth/AI4In08mlvtCuSHhd6tV3UYKVgNXbdDPks5t1YYrgaJpZM4M4Jn_ .

objectorange commented 6 years ago

I've been interested in embedding this library into 1m5.io so I'm game although I'm very limited on bandwidth.

Sincerely, Brian Taylor

Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On May 23, 2018 1:04 PM, Henk Nienhuis notifications@github.com wrote:

I am in

Op wo 23 mei 2018 17:54 schreef neomodern notifications@github.com:

@E3V3A https://github.com/E3V3A how about deciding on a crowdfunding method if there's no volunteers available? Decide on Patreon/Kickstarter/Bountysource and ping this issue with the link.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector/issues/926#issuecomment-391399575, or mute the thread https://github.com/notifications/unsubscribe-auth/AI4In08mlvtCuSHhd6tV3UYKVgNXbdDPks5t1YYrgaJpZM4M4Jn_ .

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.

unicastbg commented 6 years ago

I will also support this project.

whitetornado commented 6 years ago

How much we need?

Op wo 23 mei 2018 19:10 schreef unicastbg notifications@github.com:

I will also support this project.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector/issues/926#issuecomment-391426722, or mute the thread https://github.com/notifications/unsubscribe-auth/AI4InwfzPNIVnFVNxxb1S8Zia5nzBYoCks5t1ZgMgaJpZM4M4Jn_ .

unicastbg commented 6 years ago

We'll see after the crowd funding is official. If it happens, of course.

quantumpacket commented 5 years ago

This and the official fork are both dead. Sad :(

whitetornado commented 5 years ago

I am afraid, but I have developers what can CPR this. I think 2k or 3k its alive

Op 10 nov. 2018 15:31 schreef "0ri0n" notifications@github.com:

This and the official fork are both dead. Sad :(

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector/issues/926#issuecomment-437587847, or mute the thread https://github.com/notifications/unsubscribe-auth/AI4In1Wc0p8nblO1Bc9-H58YKO8_pUs1ks5utuNXgaJpZM4M4Jn_ .

jetta20162 commented 5 years ago

I am trying to continue the development, please check this fork: https://github.com/Jetta20162/Android-IMSI-Catcher-Detector. So far i have upgraded all sdk, gradle, etc and I cleaned up some code and implemented LTE, CDMA and WDCMA support for some parts of the code. (Cell tracking, neighbour cells, etc...). Currently only Android 8+ devices are supported because of new android APIs wont work on lower android versions

objectorange commented 5 years ago

Is it 'working minimally'?

jetta20162 commented 5 years ago

Is it 'working minimally'?

It can be compiled & should work as before. The Minimum API Level is Android 8.0 and i have cleaned up some old code. The neighboring cell info should now check for GSM/LTE/CDMA/WDCMA types

vrobolab commented 5 years ago

what about Android 7 (LineageOS 14) ?

jetta20162 commented 5 years ago

what about Android 7 (LineageOS 14) ?

Maybe i will lower the API level later, for now i will develop with Android 8 API, if you want to try it you can download the souurce and change the api level to 6 or 7

whitetornado commented 5 years ago

It will work also with GSM towers?

Op do 13 dec. 2018 07:02 schreef jetta20162 <notifications@github.com:

what about Android 7 (LineageOS 14) ?

Maybe i will lower the API level later, for now i will develop with Android 8 API, if you want to try it you can download the suource and change the api level back to 6 or 7 if you want

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector/issues/926#issuecomment-446852436, or mute the thread https://github.com/notifications/unsubscribe-auth/AI4Inxaszrqma6v_Zs4JsqooF7WYRfalks5u4e1-gaJpZM4M4Jn_ .

jetta20162 commented 5 years ago

It will work also with GSM towers? Op do 13 dec. 2018 07:02 schreef jetta20162 <notifications@github.com: … what about Android 7 (LineageOS 14) ? Maybe i will lower the API level later, for now i will develop with Android 8 API, if you want to try it you can download the suource and change the api level back to 6 or 7 if you want — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#926 (comment)>, or mute the thread https://github.com/notifications/unsubscribe-auth/AI4Inxaszrqma6v_Zs4JsqooF7WYRfalks5u4e1-gaJpZM4M4Jn_ .

At the moment it will at least work like the old version.

E3V3A commented 5 years ago

@jetta20162

It can be compiled & should work as before.

It will never work as before (as I have already mentioned here and elsewhere dozens of times). At least not as long as people keep insisting to try to revive this dinosaur carcass. After the implementation of the changes that was made after I left the project, all of the most important and relevant functionality was broken.

Either way, because of the greatly matured mobile technology in the Android field. We now have access to all the things necessary to truly make this a possibility again. This means that we have debug and mobile radio network packet access for almost all hardware platforms. (Qualcomm, MTK, Samsung etc.). However, everyone should know that the advance on the catcher side has progressed beyond crap-ware and is essentially impossible to circumvent and very hard to detect, since ~2 years ago. But there are some countermeasures available, to make this harder.

The bottom line, is that:

So don't get fooled by side-lined forks (as recently posted above) claiming to be operational. Check the commit history and you will see essentially nothing new has been done, apart updating some gradle versions.

jayrmartinignaciojr commented 5 years ago

Jajaja

Justindeveloping1 commented 5 years ago

Im really interested in this and i am new to this but stings force into 2G and still shows 3g 4g lte on cellular phones, cant we block forced 2g or atleast ring a bell that we can have a trigger to airplane mode and back for a few seconds, or am i too late?

SyntaxxxErr0r commented 5 years ago

Oh I am all a glow and giddy go hear you say this .. it would be great if more developers were not focused on the eyecandy.. I want DATA...

not pretty moving pictures.... I I wanted pretty moving pictures I'd watch TV. But I don't watch TV. Nor do I feel inclined to begin doing so.

Justindeveloping1 commented 5 years ago

i dont watch tv either but have a passion for coding and developing thank you for your reply

On Tue, Jul 2, 2019, 4:08 AM Syntaxxx Err0r notifications@github.com wrote:

Oh I am all a glow and giddy go hear you say this .. it would be great if more developers were not focused on the eyecandy.. I want DATA...

not pretty moving pictures.... I I wanted pretty moving pictures I'd watch TV. But I don't watch TV. Nor do I feel inclined to begin doing so.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector/issues/926?email_source=notifications&email_token=AMQCVTRAK4NMEFYSBFO5QE3P5MEJXA5CNFSM4DHATH72YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODZAOHTY#issuecomment-507569103, or mute the thread https://github.com/notifications/unsubscribe-auth/AMQCVTV6YUZ6OILSWRVF63DP5MEJXANCNFSM4DHATH7Q .

SyntaxxxErr0r commented 5 years ago

Awesomeness.. I personally am not much of a coder, however, I seem to have a bit of a nack for code linting. Bug hunting, testing etc. I'm more than happy to assist with those. As my monicker suggests I tend to make a lot of syntax errors, but don't let that fool you, while my own work is guaranteed to fail the first few hundred times (exaggerated but close enough) when proofreading and assisting others I set the bar higher than what I expect of myself. I also prefer analyzing data over writing the tools that gather it. I think I just wrote myself into a loop.. I might need to give myself the 3 finger salute. -weg-

Justindeveloping1 commented 5 years ago

lol well im new at this developing apps but i am willing to learn more as ive coded starting young and made programs on scientific calculators back in school but ive went to ms-dos in those days and now to linux for a couple years n0w and self taught completely so im giving myself a pat and smack for not persuing it

On Tue, Jul 2, 2019, 6:21 AM Syntaxxx Err0r notifications@github.com wrote:

Awesomeness.. I personally am not much of a coder, however, I seem to have a bit of a nack for code linting. Bug hunting, testing etc. I'm more than happy to assist with those. As my monicker suggests I tend to make a lot of syntax errors, but don't let that fool you, while my own work is guaranteed to fail the first few hundred times (exaggerated but close enough) when proofreading and assisting others I set the bar higher than what I expect of myself. I also prefer analyzing data over writing the tools that gather it. I think I just wrote myself into a loop.. I might need to give myself the 3 finger salute. -weg-

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector/issues/926?email_source=notifications&email_token=AMQCVTVBLIHF7T6YMQVLR5DP5MT2FA5CNFSM4DHATH72YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODZAZQUQ#issuecomment-507615314, or mute the thread https://github.com/notifications/unsubscribe-auth/AMQCVTSU5PJXMGN6YF6XS6TP5MT2FANCNFSM4DHATH7Q .

PeekFreansCDN commented 5 years ago

This all makes me terribly upset. One of open sources largest weaknesses and strengths simultaneously.

objectorange commented 5 years ago

I don't have the bandwidth to jump into the implementation as I'm full bore on 1M5.io but I'm definitely interested in including this as a component with 1M5 to assist in Stingray identification, blocking, and jamming. When we get enough BTC to aid in developing this, we'll provide some. Android is pretty corrupted by Google so we've opted to focus strictly on laptops, cell phones, and drones that support full JVMs (e.g. Purism).

objectorange commented 5 years ago

@beerisgood @PeekFreansCDN why don't you jump in?

objectorange commented 5 years ago

Why did @E3V3A quit on this? Who is the original lead dev on this? What's the back story?

Justindeveloping1 commented 5 years ago

I will be head developer if voted and will clear all up

On Thu, Jul 11, 2019, 6:54 PM Brian Taylor notifications@github.com wrote:

Why did @E3V3A https://github.com/E3V3A quit on this? Who is the original lead dev on this? What's the back story?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector/issues/926?email_source=notifications&email_token=AMQCVTT67WTRGVYPE67C7T3P6623ZA5CNFSM4DHATH72YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODZYGNIY#issuecomment-510682787, or mute the thread https://github.com/notifications/unsubscribe-auth/AMQCVTQD44PGIKHH3YYKBYTP6623ZANCNFSM4DHATH7Q .

objectorange commented 5 years ago

@Justindeveloping1 it doesn't appear you were the original lead dev on this project considering your profile just joined? I don't think this project is something a self-proclaimed 'noob' should lead right?

objectorange commented 5 years ago

Over 90 contributors is pretty impressive. It looks like many of the original devs are no longer even associated with the project. Not even @E3V3A. All of the people on the team now don't even seem very active on github in general.

objectorange commented 5 years ago

Could just using end-to-end encryption negate needing to block an IMSI catcher? Maybe that's why this project died? Of course using apps like Facebook doesn't use end-to-end encryption although Tor uses payload encryption which should negate IMSI catchers although they could see you connecting to a Tor entrance node if they're aware of what nodes are entrance nodes but they couldn't see content nor what you're browsing.

paulyc commented 4 years ago

https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector/fork

deltabravozulu commented 2 years ago

With consideration for the fact that nothing ever happened, I hereby vote for @Justindeveloping1 to head this project and become the lead developer such that he may clear all up.

unicastbg commented 2 years ago

Following the same logic - that something is better than nothing, I also vote for anyone who's up for this challenge. Serious skills needed here, no doubt about it. But on the other hand, if it's even still possible to do it, I believe a lot of people will be interested. And this could lead to some profit, cause I personally would like to thank the person/group of people who developed a working version of this software with a donation or by purchasing a registered version/license. I did it once already, I'll do it again.