https://hackerpaper.kaipfister.de/p/2106.05039/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:16:22 GMThttps://news.ycombinator.com/item?id=37246981urn:hackerpapers:mention:2106.05039:37246981Thu, 24 Aug 2023 09:59:10 GMT<p>Direct link to PDF https://arxiv.org/pdf/2106.05039.pdf https://www.research-collection.ethz.ch/bitstream/handle/20....</p><p><a href="https://hackerpaper.kaipfister.de/p/2106.05039/">Paper and discussion history</a>. A mention is not an endorsement.</p>cs.CRhttps://news.ycombinator.com/item?id=30761324urn:hackerpapers:mention:2106.05039:30761324Tue, 22 Mar 2022 00:02:23 GMT<p>The IMSI to TMSI process is quite interesting IMO. It embeds the AdaptOver attack, documented here: https://arxiv.org/pdf/2106.05039v1.pdf From LTrack: &gt;We propose a new type of IMSI Catcher, named IMSI Extractor. Our IMSI Extractor does not rely on fake base stations but instead uses a combination of low-power surgical message overshadowing and uplink/downlink sniffing. Even if our catcher injects a message, it does so in line with LTE protocol specification, making it hard to detect with existing IMSI Catcher detection techniques. We discuss the techniques that would be needed to detect…</p><p><a href="https://hackerpaper.kaipfister.de/p/2106.05039/">Paper and discussion history</a>. A mention is not an endorsement.</p>cs.CR