https://ericw.us/trow/lte-alerts.pdf
"Our attack can be performed using a commercially-available software defined radio, and our modifications to the open source NextEPC and srsLTE software libraries. We find that with only four malicious portable base stations of a single Watt of transmit power each, almost all of a 50,000-seat stadium can be attacked with a 90% success rate. The true impact of such an attack would of course depend on the density of cell phones in range; fake alerts in crowded cities or stadiums could potentially result in cascades of panic. Fixing this problem will require a large collaborative effort between carriers, government stakeholders, and cell phone manufacturers. To seed this effort, we also discuss several defenses to address this threat in both the short and long term."
In Romania: RO-Alert: https://ro-alert.ro/despre-ro-alert/
"RO-ALERT system allows sending Cell Broadcast messages to warn and alert citizens in case of emergency, according to the legal provisions.
RO-ALERT system is used in those circumstances in which citizens’ life and health condition are endangered, such as an extreme weather, ominous flood, terrorist attacks or other situations that may put community’s life to danger."
Info:
https://en.wikipedia.org/wiki/Cell_Broadcast
https://www.gsma.com/mobilefordevelopment/wp-content/uploads/2013/01/Mobile-Network-Public-Warning-Systems-and-the-Rise-of-Cell-Broadcast.pdf
2 protocols : CMAS (US) , CBS(EU) over 2G/3G/4G/5G
An important point to note is that CMAS and EU-Alert are compatible and so a universal standard exists for US and EU citizens.
In the Netherlands CMAS based clients are implemented by some manufacturers as CMAS and EU-Alert are compatible
Specs: https://ro-alert.ro/standarde/
version : 15
rrcRelNum : 13
rrcVerNum : 21
rbId : 0
phyCellId : 172
freq : 37950
sfn : 63872
pduNum : 5
sibMaskInSi : 0
msgLen : 13
Channel : 4
pcch
message -> c1 -> paging
pagingRecordList[0]
ue-Identity -> s-TMSI
mmec : '00010000'B(16)
m-TMSI : '11010000 01010111 10010101 11001100'B(3495400908)
cn-Domain : ps
nonCriticalExtension
nonCriticalExtension
cmas-Indication-r9 : true
version : 15
rrcRelNum : 13
rrcVerNum : 21
rbId : 0
phyCellId : 172
freq : 37950
sfn : 63941
pduNum : 2
sibMaskInSi : 2
msgLen : 28
Channel : 2
bcch-dl-sch
message -> c1 -> systemInformationBlockType1
cellAccessRelatedInfo
plmn-IdentityList[0]
plmn-Identity
mcc[0] : 2
mcc[1] : 2
mcc[2] : 6
mnc[0] : 0
mnc[1] : 5
cellReservedForOperatorUse : notReserved
trackingAreaCode : '00011011 01011010'B(7002)
cellIdentity : '00011001 00011011 01010000 1100'B(26326284)
cellBarred : notBarred
intraFreqReselection : allowed
csg-Indication : false
cellSelectionInfo
q-RxLevMin : -64
freqBandIndicator : 38
schedulingInfoList[0]
si-Periodicity : rf8
sib-MappingInfo[0] : sibType3
schedulingInfoList[1]
si-Periodicity : rf64
sib-MappingInfo[0] : sibType4
schedulingInfoList[2]
si-Periodicity : rf64
sib-MappingInfo[0] : sibType5
schedulingInfoList[3]
si-Periodicity : rf64
sib-MappingInfo[0] : sibType6
schedulingInfoList[4]
si-Periodicity : rf64
sib-MappingInfo[0] : sibType12-v920
tdd-Config
subframeAssignment : sa2
specialSubframePatterns : ssp7
si-WindowLength : ms10
systemInfoValueTag : 3
nonCriticalExtension
lateNonCriticalExtension
multiBandInfoList[0] : 41
version : 15
rrcRelNum : 13
rrcVerNum : 21
rbId : 0
phyCellId : 172
freq : 37950
sfn : 64576
pduNum : 2
sibMaskInSi : 4096
msgLen : 233
Channel : 2
bcch-dl-sch
message -> c1 -> systemInformation
criticalExtensions -> systemInformation-r8
sib-TypeAndInfo[0]
sib12-v920
messageIdentifier-r9 : '00000011 10010111'B(919)
serialNumber-r9 : '01010110 11110000'B(22256)
warningMessageSegmentType-r9 : lastSegment
warningMessageSegmentNumber-r9 : 4
warningMessageSegment-r9 : '6C00650020006D007500720064006100720065002E0020005000520045004300410055021A004900410020006500730074006552F237002000650078007400720065006D00200064006500200069006D0070006F007200740061006E00740103002000EE006E0020006100630065006100730074010300200070006500720069006F0061006452F2370103002100200049004700530055000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D000D10'H
Your style is so unique compared to other people I have read stuff from. Many thanks forposting when you have the opportunity, Guess I will just bookmark this site DebutPrivateVPN
ReplyDelete