NSA Tracks Turned-Off Phones — But Phone Makers Don't Know How

Status
Not open for further replies.

gggplaya

Distinguished
Jan 27, 2011
68
0
18,580
It's literally impossible to track a powered off phone. The operating system is not functioning, the cellular signal is not active, the circuits are powered down.

However, it is possible to install a software program to make the user think the phone has been powered off. When they press "power off", it visually gives them an indication that it is booting down, but in reality is still running.
 

InvalidError

Distinguished
Moderator
"Powered Down" might be a relative term: do phones actually have a MOSFET that physically breaks electrical continuity between the power source and RF chips or do phones rely on the RF ICs themselves to manage their own power?

If the RF ICs are managing their own power, it would be possible for Broadcom, Qualcom, etc. to have their own reporting routine in their RF chips' firmware that powers up independently from the main CPU/OS.

So there is at least one way it could happen.
 

figgie

Distinguished
Dec 7, 2009
2
0
18,510
For all Intents and Purposes... the receiver is off.

but it is simple RF. regardless if it is off or not, send a strong enough signal and it will resonate ;) the military application has been there for ever... don't query the object, query the oscillator.

Now the question is filtering the noise out.

Let me put it to you this way. We were able to track powered off radar speed guns in patrol cars.
 

Baldarhion

Honorable
Oct 16, 2013
3
0
10,510
Yes InvalidError. And even without battery, some capacitors couls do the job too.

Well... I guess the only option is a a microwave oven: (yes, luckily, it's wave proof, so
pizza Industry will be a pain in the a** for the NSA and save our privacy, i suppose...
 

realibrad

Distinguished
Mar 29, 2007
16
1
18,560
I thought this was already assumed? Here is an ABC article about how the FBI can listen in on phone calls, even when the phone is off.

http://abcnews.go.com/blogs/headlines/2006/12/can_you_hear_me/
 

razor512

Distinguished
Jun 16, 2007
501
0
18,940
It depends in the phone is able to still periodically power on the cell radio, but I guess that will be spotted during the fcc test. Other than that, the only way to track a device is if you are very close and it has some kind of RFID, or something else that can respond to RF without having a local power source. Most cities have a wide range of RFID trackers for collecting traffic data, though there is nothing saying that they cannot track other things that can respond to a similar fashion to RFID

PS modern smartphones never fully power off, if you run it through a multimeter, you will see that even when powered off, they will pull quite a few microamps (though it may be for the soft power switch, clock and other needed components to listen for that button press)
 

cgharvey

Honorable
Jul 30, 2012
1
0
10,510
what happens when you phone is off and you get a call? It says the phone is off.. so..im guessing they can "ping" your phone.. Yes? because you get back a message the subscriber can not be reached.
 

MPrice

Honorable
Mar 21, 2013
1
0
10,510
"what happens when you phone is off and you get a call? It says the phone is off.. so..im guessing they can "ping" your phone.. Yes? because you get back a message the subscriber can not be reached."

How about the concept that your phone can be assumed to be off because it cannot be pinged? Makes a bit more sense right?
 

koga73

Distinguished
Jan 23, 2008
183
0
18,630
Figgie's comment sounds about right.
but it is simple RF. regardless if it is off or not, send a strong enough signal and it will resonate the military application has been there for ever... don't query the object, query the oscillator.

Something else to consider is the phones GPS. GPS satellites are constantly beaming down signals and normally the device would triangulate its position. It seems possible that the GPS signals could "bounce" off a GPS chip or create some sort of interference even if powered down.
 

coolitic

Honorable
May 10, 2012
76
0
10,580
However, both Ericsson and Samsung suggested that it might be possible to place spyware on a phone that would keep some of its network functions active even after users pressed the power button to turn it off.

That's what I was thinking.
 

coolitic

Honorable
May 10, 2012
76
0
10,580
However, both Ericsson and Samsung suggested that it might be possible to place spyware on a phone that would keep some of its network functions active even after users pressed the power button to turn it off.

That's what I was thinking.
 

coolitic

Honorable
May 10, 2012
76
0
10,580
However, both Ericsson and Samsung suggested that it might be possible to place spyware on a phone that would keep some of its network functions active even after users pressed the power button to turn it off.

That's what I was thinking.
 

Akizu

Distinguished
Aug 11, 2011
8
0
18,510
"what happens when you phone is off and you get a call? It says the phone is off.. so..im guessing they can "ping" your phone.. Yes? because you get back a message the subscriber can not be reached. "

No, it doesn't work that way. When you turn off your phone, it sends one last signal that tells the service provider that it has been powered-off. That's why you get different message if you powered-off the phone and different one if it went out of signal range.

As for a solution to tracking: after powering-off your cell phone just warp it in a tin foil. Yes. Tin foil. That simple.
 

onichikun

Distinguished
Nov 13, 2009
43
0
18,610
"what happens when you phone is off and you get a call? It says the phone is off.. so..im guessing they can "ping" your phone.. Yes? because you get back a message the subscriber can not be reached. "

As Akizu mentioned your phone will broadcast a power-down message.. Even if that message isnt sent the cell towers know your last cell location.. if it can't ping it's last location and your phone is not present in a certain number of adjacent cells, your phone is deemed unreachable.

While "querying the oscillator" does indeed work due to resonant circuits, the noise you would have would prevent any unique characteristic identification solely on that -- the resonance of the RF circuit isn't going to trigger a ID broadcast to identify what oscillator you are querying.

It's more likely they have some low-powered heartbeat signal that continues when your phone is "off". To fix it just wrap it in tinfoil, or any conductive cage... the NSA can't beat physics.... hopefully :3
 
Status
Not open for further replies.