On Thu, Feb 25, 2010 at 08:50:54PM +0100, Karsten Nohl wrote:
My question is, is this MSC number, visible from the mobile phone side? If yes, somebody could actually wardrive, to get the MSC number-to-location mapping? Can airprobe, or OpenBTS help?
Creating the {MSC -> location} mapping database would be a very worthwhile exercise. The data collection would have to happen from phones. Either we create an application for one of the popular phone platforms (Symbian, Android, iPhone). Anybody on the list knows if these phones expose the MSC number to application software?
Sorry, the phones have no idea about this, as the current MSN number is an attribute of the core GSM network.
You can only collect this information in the core network by means of some form of access to the SS7 roming network (GSM MAP).