The Attacker Has Expensive Radio Equipment, But Your Android Phone Is Resilient
summary
Phones historically accept rogue 2G towers that harvest IMSIs, intercept or modify traffic, and even push malware — Stingrays and phone‑borne fake base stations are used in Ukraine, US law enforcement cases, and Pegasus investigations. Android implements a concrete defense: starting in Android 12 it can disable 2G at the radio hardware level via an OS→modem API (setAllowedNetworkTypesBitmap), requiring newer modems (require modem API level ≥1.6). The feature ships and reduces attack surface but only on devices with compatible radio firmware.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:50Cellular network terms
- 4:57Phone to tower connection
- 11:042G GSM flaws
- 13:12Fake towers worldwide
- 16:20Ukraine war surveillance
- 18:47Fake towers for phishing
- 20:54Why 2G flaws matter
- 21:57Disabling 2G in Android
- 23:00Restricting radio protocols
- 25:52Android telephony stack
- 27:59Impact of 2G disabling
- 28:42Android 14 encryption-only
- 29:25Q&A
related talks
08mHacking 4G and how to get arrested in 10 minutes
44mLTE And IMSI Catchers: Then And Now
44mNew Vulnerabilities in 5G Networks
33mWhen Attackers Go Mobile-First with AI
24mEnhancing Physical Perimeter Defense Using SDR
54mExposing device features on 4G & 5G networks
25mAttacking Mobile Broadband Modems Like a Criminal Would
33mHacking 5G From Radio Security To The Apis