Note that a lot of the information from the BTS is already available to anyone who "asks nicely".
The mechanism that provides roaming is based on trust, so anyone connected to the SS7 network can query the location of any phone in the world and even intercept its calls. Just say to the home carrier "hey this phone is roaming on my network, would you be able to send me all of its calls and texts?".
There was a talk/demo I saw a few years ago that went into great detail about how this works. I remember it was given by a German. Anyone know what I am talking about?
I remember something similar, it was a presentation given at CCC in Germany. Tried searching for it on their YouTube channel, just to discover said channel was terminated for breaking YouTube ToS?!
That's really sad, their channel had videos of all the past talks from the CCC, an amazing resource that's now gone.
You probably were thinking of the CCCen YouTube channel? That never was an official channel, but a copy-cat that just uploaded all the CCC stuff, and was banned for it.
Yeah, I now realized this too. Still weird as CCCen had the videos organized in a more useful way, thus popping up way above in search results.
At least good to know the stuff is still there.
"The mechanism that provides roaming is based on trust, so anyone connected to the SS7 network can query the location of any phone in the world and even intercept its calls."
One of the first things I did after opening the article was to search for the string "ss7" ... was disappointed to see it mentioned zero times ...
The mechanism that provides roaming is based on trust, so anyone connected to the SS7 network can query the location of any phone in the world and even intercept its calls. Just say to the home carrier "hey this phone is roaming on my network, would you be able to send me all of its calls and texts?".