#baseband — Public Fediverse posts

2 years ago I did a PoC to run #rust 🦀 in the #pixel modem

Today it shipped in millions of devices!

They grow up to fast! 🥲

https://security.googleblog.com/2026/04/bringing-rust-to-pixel-baseband.html

#rust #security #smartphone #baseband

3G в каждый подвал. Как устроена и как работает фемтосота

Приветствую всех! Уже не раз я рассказывал про устройство сотовых сетей разных стандартов и годов. Но общим там было одно: базовая станция в любой сотовой сети - достаточно мощное, габаритное и дорогостоящее устройство. Но начиная со стандарта 3G появились их миниатюрные аналоги - фемтосоты. Как же они устроены, что позволяют реализовать полноценную базовую станцию в корпусе устройства, занимающего места не больше, чем обычный Wi-Fi роутер? Сейчас и разберёмся. Заодно узнаем, как они вообще работают, а также немного поговорим о том, почему вам очень вряд ли удастся самим запустить такую штуку дома. Press F1 to continue

https://habr.com/ru/companies/timeweb/articles/983918/

#timeweb_статьи #gsm #3g #wcdma #фемтосота #трансивер #ethernet #блок_питания #baseband #arm

3G в каждый подвал. Как устроена и как работает фемтосота

Приветствую всех! Уже не раз я рассказывал про устройство сотовых сетей разных стандартов и годов. Но общим там было одно: базовая станция в любой сотовой сети - достаточно мощное, габаритное и дорогостоящее устройство. Но начиная со стандарта 3G появились их миниатюрные аналоги - фемтосоты. Как же они устроены, что позволяют реализовать полноценную базовую станцию в корпусе устройства, занимающего места не больше, чем обычный Wi-Fi роутер? Сейчас и разберёмся. Заодно узнаем, как они вообще работают, а также немного поговорим о том, почему вам очень вряд ли удастся самим запустить такую штуку дома. Press F1 to continue

https://habr.com/ru/companies/timeweb/articles/983918/

#timeweb_статьи #gsm #3g #wcdma #фемтосота #трансивер #ethernet #блок_питания #baseband #arm

3G в каждый подвал. Как устроена и как работает фемтосота

Приветствую всех! Уже не раз я рассказывал про устройство сотовых сетей разных стандартов и годов. Но общим там было одно: базовая станция в любой сотовой сети - достаточно мощное, габаритное и дорогостоящее устройство. Но начиная со стандарта 3G появились их миниатюрные аналоги - фемтосоты. Как же они устроены, что позволяют реализовать полноценную базовую станцию в корпусе устройства, занимающего места не больше, чем обычный Wi-Fi роутер? Сейчас и разберёмся. Заодно узнаем, как они вообще работают, а также немного поговорим о том, почему вам очень вряд ли удастся самим запустить такую штуку дома. Press F1 to continue

https://habr.com/ru/companies/timeweb/articles/983918/

#timeweb_статьи #gsm #3g #wcdma #фемтосота #трансивер #ethernet #блок_питания #baseband #arm

3G в каждый подвал. Как устроена и как работает фемтосота

Приветствую всех! Уже не раз я рассказывал про устройство сотовых сетей разных стандартов и годов. Но общим там было одно: базовая станция в любой сотовой сети - достаточно мощное, габаритное и дорогостоящее устройство. Но начиная со стандарта 3G появились их миниатюрные аналоги - фемтосоты. Как же они устроены, что позволяют реализовать полноценную базовую станцию в корпусе устройства, занимающего места не больше, чем обычный Wi-Fi роутер? Сейчас и разберёмся. Заодно узнаем, как они вообще работают, а также немного поговорим о том, почему вам очень вряд ли удастся самим запустить такую штуку дома. Press F1 to continue

https://habr.com/ru/companies/timeweb/articles/983918/

#timeweb_статьи #gsm #3g #wcdma #фемтосота #трансивер #ethernet #блок_питания #baseband #arm

SECRET MSGS phone companies DON'T want you to know about by #nbtv #simcards #baseband #security #privacy

https://youtu.be/0Em-J_3QYu4

#yt

What is the best #cellular #soc ?
#baseband #ss7 #firmware #broadband #5G #LTE

Something like this for the #mechaComet phone ... #crowdsupply #kickstarter

n258 5G mmwave - but Quectel is on the list and this hat is bulky (even minus casing) https://selectcommitteeontheccp.house.gov/media/letters/letter-treasury-and-defense-secretaries-chinese-military-company-quectel

https://www.waveshare.com/wiki/RM520N-GL_5G_Router

#sixfab #adafruit #pihat #rpi #Quectel

On Mobile Phone Security
https://www.kicksecure.com/wiki/Mobile_Phone_Security
#SS7 and #baseband #vulnerabilities

What about #mobian hardening on a #MechaComet with a cellular hat? Then there's only carrier protocol weaknesses...

If ISPs use microwave relays (the hated 'air' - remember Max Headroom) and NSA access points, is domestic broadband really secure either? But the cable or fiber doesn't have 'carrier' vulns.
https://www.kicksecure.com/wiki/Router_and_Local_Area_Network_Security

#kicksecure #whonix #docs #security-misc

#Android 14 Adds New #Security Features to Block 2G Exploits and #Baseband Attacks
https://thehackernews.com/2024/10/android-14-adds-new-security-features.html

Full Chain Baseband Exploits (Mediatek)

Part 0: https://labs.taszk.io/articles/post/basebanheimer_hwio/
Part 1: https://labs.taszk.io/articles/post/full_chain_bb_part1/
Part 2: https://labs.taszk.io/articles/post/full_chain_bb_part2/

#baseband #cybersecurity

MediaTek 5G baseband firmware reverse engineering

Blog post: https://research.nccgroup.com/2024/05/07/ghidra-nanomips-isa-module/
nanoMIPS Ghidra module: https://github.com/nccgroup/ghidra-nanomips
Mediatek firmware tools: https://github.com/nccgroup/mtk_bp

#baseband #infosec

Full Chain Baseband Exploits (Mediatek)

Part 0: https://labs.taszk.io/articles/post/basebanheimer_hwio/
Part 1: https://labs.taszk.io/articles/post/full_chain_bb_part1/
Part 2: https://labs.taszk.io/articles/post/full_chain_bb_part2/

#baseband

Fun fact, 15 cellular modem/baseband bugs got fixed this month alone 👀

https://source.android.com/docs/security/bulletin/pixel/2024-03-01

#modem #baseband #android #security

"How to Use a Pixel Tablet as a Secure Calling and Messaging Device" (using @calyxos)

https://yawnbox.com/blog/how-to-use-an-pixel-tablet-as-a-secure-calling-and-messaging-device/

this is a new blog post by me based on years of security and privacy research on these types of devices

feedback always welcome, i'm not perfect, and many different people have many different threat models

#google #android #pixel #tablet #security #cybersecurity #privacy #signal #baseband #nsa #fvey

"How to Use a Pixel Tablet as a Secure Calling and Messaging Device" (using @calyxos)

https://yawnbox.com/blog/how-to-use-an-pixel-tablet-as-a-secure-calling-and-messaging-device/

this is a new blog post by me based on years of security and privacy research on these types of devices

feedback always welcome, i'm not perfect, and many different people have many different threat models

#google #android #pixel #tablet #security #cybersecurity #privacy #signal #baseband #nsa #fvey

"How to Use a Pixel Tablet as a Secure Calling and Messaging Device" (using @calyxos)

https://yawnbox.com/blog/how-to-use-an-pixel-tablet-as-a-secure-calling-and-messaging-device/

this is a new blog post by me based on years of security and privacy research on these types of devices

feedback always welcome, i'm not perfect, and many different people have many different threat models

#google #android #pixel #tablet #security #cybersecurity #privacy #signal #baseband #nsa #fvey

"How to Use a Pixel Tablet as a Secure Calling and Messaging Device" (using @calyxos)

https://yawnbox.com/blog/how-to-use-an-pixel-tablet-as-a-secure-calling-and-messaging-device/

this is a new blog post by me based on years of security and privacy research on these types of devices

feedback always welcome, i'm not perfect, and many different people have many different threat models

#google #android #pixel #tablet #security #cybersecurity #privacy #signal #baseband #nsa #fvey

"How to Use a Pixel Tablet as a Secure Calling and Messaging Device" (using @calyxos)

https://yawnbox.com/blog/how-to-use-an-pixel-tablet-as-a-secure-calling-and-messaging-device/

this is a new blog post by me based on years of security and privacy research on these types of devices

feedback always welcome, i'm not perfect, and many different people have many different threat models

#google #android #pixel #tablet #security #cybersecurity #privacy #signal #baseband #nsa #fvey

“Android’s defense-in-depth strategy applies not only to the #Android OS running on the Application Processor (AP) but also the firmware that runs on devices. We particularly prioritize hardening the cellular #baseband given its unique combination of running in an elevated privilege and parsing untrusted inputs that are remotely delivered into the device.”

https://security.googleblog.com/2023/12/hardening-cellular-basebands-in-android.html

Currently catching up with some not-so-recent papers... I love this one from 2021 by @marcograss and Xingyu Chen!

Over The Air #Baseband #Exploit: Gaining Remote Code Execution on #5G Smartphones

https://keenlab.tencent.com/zh/whitepapers/us-21-Over-The-Air-Baseband-Exploit-Gaining-Remote-Code-Execution-on-5G-Smartphones-wp.pdf

Google tells users of some Android phones: Nuke voice calling to avoid infection - Enlarge / Images of the Samsung Galaxy S21, which runs with an Exynos c... - https://arstechnica.com/?p=1925040 #vulnerabilities #wificalling #baseband #android #samsung #biz⁢ #volte

Our next release will override carrier selected SUPL server (usually supl.google.com) with supl.grapheneos.org by default. Similar to connectivity checks, etc. there will be a new Settings toggle for choosing between GrapheneOS proxy, Standard and Disabled for SUPL.

#grapheneos #privacy #security #supl #agnss #gnss #geolocation #location #carrier #baseband #qualcomm #broadcom #google

Our next release will override carrier selected SUPL server (usually supl.google.com) with supl.grapheneos.org by default. Similar to connectivity checks, etc. there will be a new Settings toggle for choosing between GrapheneOS proxy, Standard and Disabled for SUPL.

#grapheneos #privacy #security #supl #agnss #gnss #geolocation #location #carrier #baseband #qualcomm #broadcom #google

Our next release will override carrier selected SUPL server (usually supl.google.com) with supl.grapheneos.org by default. Similar to connectivity checks, etc. there will be a new Settings toggle for choosing between GrapheneOS proxy, Standard and Disabled for SUPL.

#grapheneos #privacy #security #supl #agnss #gnss #geolocation #location #carrier #baseband #qualcomm #broadcom #google

Our next release will override carrier selected SUPL server (usually supl.google.com) with supl.grapheneos.org by default. Similar to connectivity checks, etc. there will be a new Settings toggle for choosing between GrapheneOS proxy, Standard and Disabled for SUPL.

#grapheneos #privacy #security #supl #agnss #gnss #geolocation #location #carrier #baseband #qualcomm #broadcom #google

Our next release will override carrier selected SUPL server (usually supl.google.com) with supl.grapheneos.org by default. Similar to connectivity checks, etc. there will be a new Settings toggle for choosing between GrapheneOS proxy, Standard and Disabled for SUPL.

#grapheneos #privacy #security #supl #agnss #gnss #geolocation #location #carrier #baseband #qualcomm #broadcom #google

A rich #training #offer at BSides Milano we have top-notch trainings, in some case for the first time in #Italy! All #in-person! The #event will be held from 4 to 8 July 2023. From 4 to 7 we will be focus on #learnitall on the 8 we will deep dive in our #amazing #conference. Ticket will be available from tonight for the trainings. We have an early bird rate until 30th April.
Are you ready? We are!! join our group SecurityBsidesItalia #linkedin or on #discord https://lnkd.in/dBu7wkJG for detailed info! #cyber #threatintelligence #threatintel #cloud #redteaming #redteam #blueteam #threathunting #exploitation #secureboot #TTE #multicloud #hybridcloud #voip #Linux #Windows #LTE #baseband #deception #detection #evasion #edr #BSML23 #AWS #Azure #AzureAD #GCP #devops #cicd #RTOS #FalseFlag #HoneyNet #IDAPro #Python #reverseengineering #Ghidra #network #MITRE #TTPs #persistence #commandandcontrol #lateralmovement #osint #obfuscation #malware #malwareanalysis .
Reserve your your spot!! https://lnkd.in/dZf-yyPv

A rich #training #offer at BSides Milano we have top-notch trainings, in some case for the first time in #Italy! All #in-person! The #event will be held from 4 to 8 July 2023. From 4 to 7 we will be focus on #learnitall on the 8 we will deep dive in our #amazing #conference. Ticket will be available from tonight for the trainings. We have an early bird rate until 30th April.
Are you ready? We are!! join our group SecurityBsidesItalia #linkedin or on #discord https://lnkd.in/dBu7wkJG for detailed info! #cyber #threatintelligence #threatintel #cloud #redteaming #redteam #blueteam #threathunting #exploitation #secureboot #TTE #multicloud #hybridcloud #voip #Linux #Windows #LTE #baseband #deception #detection #evasion #edr #BSML23 #AWS #Azure #AzureAD #GCP #devops #cicd #RTOS #FalseFlag #HoneyNet #IDAPro #Python #reverseengineering #Ghidra #network #MITRE #TTPs #persistence #commandandcontrol #lateralmovement #osint #obfuscation #malware #malwareanalysis .
Reserve your your spot!! https://lnkd.in/dZf-yyPv

A rich #training #offer at BSides Milano we have top-notch trainings, in some case for the first time in #Italy! All #in-person! The #event will be held from 4 to 8 July 2023. From 4 to 7 we will be focus on #learnitall on the 8 we will deep dive in our #amazing #conference. Ticket will be available from tonight for the trainings. We have an early bird rate until 30th April.
Are you ready? We are!! join our group SecurityBsidesItalia #linkedin or on #discord https://lnkd.in/dBu7wkJG for detailed info! #cyber #threatintelligence #threatintel #cloud #redteaming #redteam #blueteam #threathunting #exploitation #secureboot #TTE #multicloud #hybridcloud #voip #Linux #Windows #LTE #baseband #deception #detection #evasion #edr #BSML23 #AWS #Azure #AzureAD #GCP #devops #cicd #RTOS #FalseFlag #HoneyNet #IDAPro #Python #reverseengineering #Ghidra #network #MITRE #TTPs #persistence #commandandcontrol #lateralmovement #osint #obfuscation #malware #malwareanalysis .
Reserve your your spot!! https://lnkd.in/dZf-yyPv

A rich #training #offer at BSides Milano we have top-notch trainings, in some case for the first time in #Italy! All #in-person! The #event will be held from 4 to 8 July 2023. From 4 to 7 we will be focus on #learnitall on the 8 we will deep dive in our #amazing #conference. Ticket will be available from tonight for the trainings. We have an early bird rate until 30th April.
Are you ready? We are!! join our group SecurityBsidesItalia #linkedin or on #discord https://lnkd.in/dBu7wkJG for detailed info! #cyber #threatintelligence #threatintel #cloud #redteaming #redteam #blueteam #threathunting #exploitation #secureboot #TTE #multicloud #hybridcloud #voip #Linux #Windows #LTE #baseband #deception #detection #evasion #edr #BSML23 #AWS #Azure #AzureAD #GCP #devops #cicd #RTOS #FalseFlag #HoneyNet #IDAPro #Python #reverseengineering #Ghidra #network #MITRE #TTPs #persistence #commandandcontrol #lateralmovement #osint #obfuscation #malware #malwareanalysis .
Reserve your your spot!! https://lnkd.in/dZf-yyPv

A rich #training #offer at BSides Milano we have top-notch trainings, in some case for the first time in #Italy! All #in-person! The #event will be held from 4 to 8 July 2023. From 4 to 7 we will be focus on #learnitall on the 8 we will deep dive in our #amazing #conference. Ticket will be available from tonight for the trainings. We have an early bird rate until 30th April.
Are you ready? We are!! join our group SecurityBsidesItalia #linkedin or on #discord https://lnkd.in/dBu7wkJG for detailed info! #cyber #threatintelligence #threatintel #cloud #redteaming #redteam #blueteam #threathunting #exploitation #secureboot #TTE #multicloud #hybridcloud #voip #Linux #Windows #LTE #baseband #deception #detection #evasion #edr #BSML23 #AWS #Azure #AzureAD #GCP #devops #cicd #RTOS #FalseFlag #HoneyNet #IDAPro #Python #reverseengineering #Ghidra #network #MITRE #TTPs #persistence #commandandcontrol #lateralmovement #osint #obfuscation #malware #malwareanalysis .
Reserve your your spot!! https://lnkd.in/dZf-yyPv

@BSidesMilano #Training #Spotlight #reverseengineering #rtos #arm #Python #3gpp #BTS #Baseband #Exploitation #CyberAttack #CyberSecurity #hacker #infosec Check out the website for more Insight!!

:twitter:​ finally seems to be flat-lining, trying out this new mastodon thing...

#introduction, for peeps I've not met prior via my bird app handle @ntpopgetdope. I'm a vulnerability researcher that's worked in the industry professionally for >4yrs

My background stems from an obsession with #windowsinternals & the vastly underrated 'HAL.dll'. These days I'm into baseband vuln research working on obscure hardware, architectures & attacks. Love chatting about all things:
#fpga #uefi #baseband #faultinjection #openhardware #embeddedelectronics #pcbdesign and #cats !

Currently with the @InterruptLabs crew, a boutique vulnerability research & exploit development firm in the UK.

I’ve heard that the #GSM standard enables carriers to push #baseband updates to users’ devices, and that devices simply trust all towers to have this control. So my theory is that the carrier pushed an update that bricked the GSM modem. Is that possible? I heard from an unreliable source that it’s no longer possible for towers to push updates. Is there a more likely scenario?