SoylentNews

StingRay in the UK: British Invasion of Privacy

takyon writes:

Stingray cell site simulators (IMSI catchers) have been discovered in London according to an investigation by Sky News:

Sky News used software made by GMSK Cryptophone, a German security company, to look for the tell-tale signs of Stingray activity. Over three weeks, Sky News discovered more than 20 instances in London. The CEO of Cryptophone, Bjoern Rupp, said: "The abnormal events that Sky News had encountered can clearly be categorised as strong indicators for the presence of IMSI catchers in multiple locations."

Sky News has published its complete data logs here [50MB+]. This is believed to be the first direct evidence of Stingray use in the UK.

In November, The Times reported that the Metropolitan Police Service, the UK's largest police force, was using Stingray technology, citing anonymous sources. And according to The Guardian, the Metropolitan Police paid £143,455 for the surveillance equipment in 2009.

Despite repeated Freedom of Information requests, including by Sky News, the Met neither confirms nor denies that the force uses IMSI catchers. Asked directly about the force's use of stingrays by Sky News, Bernard Hogan-Howe, the Met commissioner and the UK's most senior police officer, said: "We're not going to talk about it, because the only people who benefit are the other side, and I see no reason in giving away that sort of thing. If people imagine that we've got the resources to do as much intrusion as they worry about, I would reassure them that it's impossible."

Keith Bristow, the director-general of the National Crime Agency, also told Sky News: "Some of what we would like to talk about to get the debate informed and logical, we can't, because it would defeat the purpose of having the tactics in the first place. Frankly, some of what we need to do is intrusive, it is uncomfortable, and the important thing is we set that out openly and recognise there are difficult choices to be made."

Bruce Schneier on Increasing Use of Stingray

kadal writes:

Bruce Schneier has an article on increasing use of Stingray:

[Stingray] is the code name for an IMSI-catcher (IMSI = International Mobile Subscriber Identity), which is basically a fake cell phone tower sold by Harris Corporation to various law enforcement agencies. (It's actually just one of a series of devices with fish names -- Amberjack is another -- but it's the name used in the media.) What is basically does is trick nearby cell phones into connecting to it. Once that happens, the IMSI-catcher can collect identification and location information of the phones and, in some cases, eavesdrop on phone conversations, text messages, and web browsing.

There are dozens of these devices scattered around Washington, DC, and the rest of the country run by who-knows-what government or organization. Criminal uses are next.

He has been remarkably consistent about his main point:

We have one infrastructure. We can't choose a world where the US gets to spy and the Chinese don't. We get to choose a world where everyone can spy, or a world where no one can spy. We can be secure from everyone, or vulnerable to anyone.