I perfectly understand and agree about being reluctant to publish code that could be used
for malicious purposes.
I was talking more about what Harald suggested: a public/private git repo related with
Layers implementation into the MS.
Cheers,
Luca
Currently there is no commercial activity
going on. and tool mostly contain testing tools like Multiple IMSI Detach .Identity
impersonation , channel hijacking like one presented in this 29C3. Channel DOS. more issue
is if we publish such tools we might get in trouble from Government and also from telecom
Operator for creating such tools. for same purpose we didnt published those tools. its
more like publishing complete sniffing app for GSM with all codec support.
currently we shall publish l1 l2 l3 app on target code soon when code cleaning will be
completed. but dont get time as code is having multiple changes and uses library from
different osmocom git hosted locally.
about publishing tools and research papers we shall do it after total research is
complete.
and reason that its taking too much time is am single person who can do technical work
and coding rest team is more on core telecom network security.
thats major issue in completing research .
On Wed, Jan 2, 2013 at 10:07 AM, <luca.bongiorni1(a)studenti.unimi.it> wrote:
So, if I may ask, since you are NOT having anykind of commercial activity related with
osmocom's tools and is more than one year that you are asking for technical
explanations over this ml/irc... Why u didn't publish yet the sources/results of your
researches into a public repo as Harald suggested?
Cheers,
Luca
Sent from my Fuffaphone®
From: Akib Sayyed <akibsayyed(a)gmail.com>
Sender: baseband-devel-bounces(a)lists.osmocom.org
Date: Wed, 02 Jan 2013 08:36:46 +0300
To: Luca Bongiorni<luca.bongiorni1(a)studenti.unimi.it>
Cc: <baseband-devel(a)lists.osmocom.org>rg>; Harald Welte<laforge(a)gnumonks.org>
Subject: Re: 29c3 youtube video
Damn typo mistake
On Jan 2, 2013 8:35 AM, "Akib Sayyed" <akibsayyed(a)gmail.com> wrote:
Currently we are not in production stage.
We are more focused on buying own stack or buying chipset with compatible stack as there
is no gprs/edge/3g suppprt in osmocom.
Our first tool was based on osmocom but we are not in production.
On Jan 2, 2013 12:12 AM, "Luca Bongiorni"
<luca.bongiorni1(a)studenti.unimi.it> wrote:
>
> Hey all,
> actually is "interesting" his web site.
>
> Since it seems a commercial website*:
>
> * " Matrix Shell developed own GSM penetration testing tool.This tool is
comprised of hardware unit and a laptop.it can perform various test on network using
custom firmware.
> Using this too tester can identify state in which end user is getting service in
terms of security."
>
> * "We provide following services.
> GSM Network Penetration Testing
> Matrixshell have developed a tool that can be used for testing attack vectors from
users point of view. That is attacks that can be carried out by using modified handsets
which may cause misusing identity of GSM subscriber , mass cellphone cell phone switch
off ,denial of service of subscriber etc. Such vulnerability may cause loss in reputation
of provider.
> We can find out such issues using our own tools. Our tools comprised of UM interface
hardware and a laptop communicating with UM interface. This tool can run different tests
on network like: Checking encryption type, Authentication bypass, Wrong way of TMSI
assignment by network, Identity impersonating."
>
> I am wondering how his software tools are dealing with Osmocom's licenses.
>
> Cheers,
> Luca
>
> > are you sharing your current progress in a public git repository? If
> > not, I'd like to strongly encourage you to do so. I can also give you
> > commit access so you can push to a private branch on
git.osmocom.org, if you
> > prefer that.
> >
> > --
> > - Harald Welte <laforge(a)gnumonks.org>
http://laforge.gnumonks.org/
> > ============================================================================
> > "Privacy in residential applications is a desirable marketing
option."
> > (ETSI EN 300 175-7 Ch. A6)
> >
>
>
--
Akib Sayyed
Matrix-Shell
akibsayyed(a)gmail.com
akibsayyed(a)matrixshell.com
Mob:- +91-966-514-2243