Burner Phone 101
85 points
1 day ago
| 4 comments
| rebeccawilliams.info
| HN
theothertimcook
1 day ago
[-]
In many countries you need a valid government ID document to activate a mobile service which means burners do not really exist in those places.

Unless you bought a pixel, graphene’d it and then paid a homeless person to activate a pre-paid data only sim which you would top up with vouchers paid in cash and used a von and international voip service…

A lot of effort though

reply
tim333
1 day ago
[-]
Silent link esims are quite good for getting your phone to work on any country or network. I have one, not for privacy but more for better phone coverage and it works pretty well. No ID and you pay in crypto - btc/monero etc. (https://silent.link/)

For me the main use is that I'm on o2 in the UK, but if in some dead spot with no signal I can flip the sim settings and connect via EE or whatever.

reply
CryptoBanker
16 hours ago
[-]
>For me the main use is that I'm on o2 in the UK, but if in some dead spot with no signal I can flip the sim settings and connect via EE or whatever.

Why not just get an EE SIM if that's your main use?

reply
blitzar
1 day ago
[-]
Just track the hardware. A couple of days of normal usage and should be able to assign a 99% probability on you being the owner of that phone.
reply
4gotunameagain
1 day ago
[-]
> which means burners do not really exist in those places.

This is very wrong. In Germany you can go to any shady kiosk in a big city and buy a pre activated SIM card invariably registered to some Arabic or Pakistani name.

You can buy it in cash. Completely untraceable if you take care of CCTV.

reply
torcete
1 day ago
[-]
I have the feeling that whenever you are on an airport (and maybe railway stations too) they cross your IMEI with the boarding pass info. I believe that in the UK police use some middle-man towers, which name I have forgotten, to collect as much data as possible.
reply
vaylian
1 day ago
[-]
You are probably thinking of a stingray https://en.wikipedia.org/wiki/Stingray_phone_tracker
reply
tenacious_tuna
1 day ago
[-]
> Radios off (GPS/Wi-Fi/Bluetooth) unless needed

GPS is a passive technology, no?

Downloading GPS assist data obviously isn't, and plenty of phones use wifi scanning as a way to augment GPS position fixes, but this seemed a strange callout. Am I missing something?

reply
netrap
1 day ago
[-]
if the phone is confiscated it could be saving GPS automatically, i guess
reply
h4ck_th3_pl4n3t
1 day ago
[-]
While I like the sentiment of the article, I think most people are not aware of how hostile baseband firmwares are implemented on most SoCs that phones come with. Usually the cell tower handshakes that make you trackable can't be put off, meaning the modem will run in sleep mode even when you are in airplane mode (which is kinda funny considering the dangers of air travel, right? Right?).

Are there actually smartphones without an IMEI and with a Wi-Fi card only, preferrably not a Broadcom one?

reply
KeybInterrupt
1 day ago
[-]
You might be looking for an android based Media player device.

But they are likely not ideal for the use case...

reply
madethemcry
1 day ago
[-]
Can you please give any sources? While it sounds plausible and interesting it's nothing more than a wild conspiracy theory without some background information.
reply
aja12
1 day ago
[-]
Baseband SoC running their own OS independent from Android/iOS and staying asleep (while still listening for incoming signals) is very much no longer in conspiracy theory territory and more an established fact now. I don't have the source at hand but it's in one of the standards. And the purpose is very clear: LEA like Interpol must be able to locate any IMEI at any point if in tower range, regardless of the power state of the "main" OS
reply
pdesi
1 day ago
[-]
Even in airplane mode?
reply
h4ck_th3_pl4n3t
1 day ago
[-]
I dare you to do the following:

Charge phone to full 100%. Turn it off.

Put it into a faraday cage, e.g. a steel box, for 7 days.

Take it out again and wonder why the battery is empty.

(The faraday cage has the effect of making the modem have to switch bands constantly, which costs more electricity than sleep mode in LTE)

reply
h4ck_th3_pl4n3t
1 day ago
[-]
Buy a broadcom smartphone. Turn bluetooth off, and set it to airplane mode. Then Bluepwn your device, with bluetooth turned off.

Funny how airplane mode didn't work.

That's just one of the quirks. Baseband and what qualcomm is tracking is way worse.

I recommend buying an old Motorola Calypso device and fiddling with osmocomBB, you can DIY an IMSI catcher pretty easily. And you'll be mind blown how many class0 SMS you'll receive per day, just for tracking you. Back in the days you could track people's phones remotely but the popularity of HushSMS and other tools made cell providers block class0 SMS not sent by themselves.

This wiki article is a nice overview: https://github.com/CellularPrivacy/Android-IMSI-Catcher-Dete...

reply