Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://infosec.exchange/@micahflee" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>micahflee</span></a></span> lemme guess: <span class="h-card" translate="no"><a href="https://mastodon.social/@eff" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>eff</span></a></span> just took a multi-network eSIM and multi-network WWAN modules to scan for "<a href="https://infosec.space/tags/deauth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>deauth</span></a>" / "<a href="https://infosec.space/tags/EvilTwin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>EvilTwin</span></a>" attacks?</p><p>Cuz I remember <span class="h-card" translate="no"><a href="https://social.heise.de/@heiseonline" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>heiseonline</span></a></span> or <span class="h-card" translate="no"><a href="https://squeet.me/profile/golem" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>golem</span></a></span> actually suggest this as a method to detect <a href="https://infosec.space/tags/IMSIcatchers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IMSIcatchers</span></a> without requiring an expensive <a href="https://infosec.space/tags/SDR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SDR</span></a>: </p><ul><li>By precisely looking when which WWAN stick (for <a href="https://infosec.space/tags/3G" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>3G</span></a> back then) got disconnected and warning if they all got disconnected & reconnected at the same time...</li></ul><p>AFAIK <a href="https://infosec.space/tags/GSMK" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>GSMK</span></a> uses that same technique for their <a href="https://infosec.space/tags/Baseband" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Baseband</span></a>-<a href="https://infosec.space/tags/Firewall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Firewall</span></a> to automatically detect <a href="https://infosec.space/tags/Interception" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Interception</span></a> attempts and deploy countermeasures!</p>