lainchan / sec
dumbphone private conversations
Boris Grishenko · 2018-08-28 18:01
Hello lainons.
Is there a way to talk privately on a dumb phone? I am talking about the case of a clear text messages that you don't want your mobile operator to see. I can only think of email apps that many feature phones have.
But how do they work? Which protocols do they use? Is there any encryption?
How do i check that? What about phones with gmail apps? What is the difference?
Thanks.
Donna Hawthorne · 2018-08-28 18:40
If you're only worried about your carrier, something like Facebook messages over https should be sufficient so long as they aren't spying on the device.
SHODAN · 2018-08-28 23:16
>Facebook messages over https should be sufficient so long as they aren't spying on the device.
This must certainly be bait, what model pf phone are you using? you must be outside the united states, because American dumb phones still have to have certain safety technologies integrated into them.
To my understanding most truly "dumb" phones do not have email capabilities (else they would be "smart phones")
The best way to get plaintext messages is to use a key that only you and the recipient know discussed offline, and then spamming junk text back and forth with actual messages in the middle. If the case is that you are truly using a "dumb phone" that does not use mobile data to transmit information than in many cases you can at least have more privacy, becasue data IIRC is still available to anybody (mitm/ not regulated as wiretapping)
in the US, dumb phones are virtually obsolete, with most carriers not even using 2g anymore in favor of 3g tech
assume that if it has apps preinstalled for gmail or facebook, then the device is already compromised form the beginning, the apps themselves have access to the device, and facebook is known to take "private" messages and use them for target advertising
Six · 2018-08-29 00:19
He is talking about using a smart phone if your only worry is your carrier
There is no secure way to send plain text data to others on a dumb phone without your carrier knowing
Your main option is only sms which can be easily monitored by your carrier or anyone else
There are others ways but you have to be in close vicinity to your sender/receiver
Unidentified · 2018-08-29 00:44
>>5705
Smart phones aren't defined by email or data access. Most dumb phones today are actually feature phones with 3G, a browser, and limited app support. There are cheaper phones without any of those things, but they're so unattractive and the savings are so minimal that you might have to import them yourself.
XERXES · 2018-08-29 00:59
embedding secrets into the noise via steganography during conversation would be ideal but then again that would require a smart phone or specialized hardware.
Nell · 2018-08-29 12:03
If you have endless money to burn you can buy one of these for yourself and everyone you want to talk to: https://www.cryptophone.de/en/products/mobile/cpg10i/
Liet Kynes · 2018-08-29 19:08
OP here.
Let me explain my use case. I wanna have a phone not based on android/ios and with physical buttons. The only function from a smartphone i need is the ability to speak privately with my friends. I don't care about CIA type stuff and theoretical sec for that. The biggest threat i try to avoid is the ability of the police(through carrier) to read the history of your sms and calls. In my country it is very easy to them to get this information, and there a real chance that they will use this information against you if you were in the wrong place at the wrong time.
I'd take a basic nokia 105 for example, or any popular feature phone with mail app(it may have a 3g module, i don't care), but i wanna know exactly how this app is working. I couldn't find this information for popular phones like nokia.
Information like which protocol does it use, does it have encryption etc. I have no idea how to check this with cellular internet and feature phone os'es
Splicer · 2018-08-29 19:11
>>5715
*Not encrypted traffic is a risk too
Neuromancer · 2018-08-29 20:15
>>5715
It sounds like you should be using a smart phone with an OTR messaging app. I know it's not what you want, but a dumb phone just isn't an option as far as I know. As for finding out exactly what a feature phone is doing, good luck with that. They're all black boxes, even more so than typical smart phones.
Unspecified · 2018-08-29 22:21
>>5709
what is the feasibility of making your answering machine a jpeg as noise?
>>5715
>nokia 105
those are nice because of the lack of features, but your movement can be checked by pinging the device from multiple towers (WW2 era radio intelligence tier)
you messages can be intercepted over the air, you best bet is seeing if the carrier you use encrypts information, and how close it operates with the govt (some countries ISP allow the government to intercept skype etc. and commercial software exists to do just that)
Drano · 2018-08-29 22:23
>>5718
open phone, remove all the chips and the speakers, replace with resistors, leave only one transmitter.
if the circuits are large enough to work with, this may be an option
The other option (probably easier) would be to build a device using off the shelf chips
Eldon Tyrell · 2018-08-30 10:52
>>5715
I have the exact phone on your first post picture. I got it originally for having 2 sim chips, since I my smartphone only supported 2 at the time and I needed to use 3 chips.
Recently I put a 16GB sd card on it and use it for listening to music only. The battery lasts for a long time. Things I don't like is that the screen was put in the wrong direction, so if you move it horizontally, colors can get a different shade, like it happens normally when moving dumb phones vertically. I also don't like that it doesn't support Japanese characters, but maybe that's too much for a device this small.
Going back on topic, I am not sure but it seems to have support for J2ME, I can test this functionality for this if you want. Maybe there is some kind of J2ME app you could install on dumb phones to encrypt messages before sending them through SMS/MMS. It doesn't connect to the internet at all.
Chani · 2018-08-30 15:27
What are the rules here, OP? Are we calling anything without a data connection a "dumb phone"? (If you have a data connection, just use that with some kind of OTR. Nothing else you come up with will be easier or more secure.) Back in the day I remember you used to be able to sideload software on flip-phones using the SD card. Easiest solution is probably to implement something like textsecure for encrypted SMS. I don't think you're going to get secure voice, for the reason below.
Why do you want to do this? There aren't any privacy advantages to a dumb phone over a well-managed (no google, no carrier botnet, etc.) smartphone. Your carrier can still track you via cell tower triangulation, closed firmware with few if any custom alternatives, no control over hardware...
>>5720
>>5709
Keep in mind that cell phones utilize quite a bit of digital adaptive filtering and lossy compression. That's why you can't receive faxes on a digital line (or use it for dial-up service). Businesses that still use fax have to pay for an actual copper line from the cable company. I would be surprised if you could get reliable data transfer over a digital voice line because you can't count on the encoded bytestream remaining the same in transit.