Location leaks on the GSM air interface

Placeholder for some further research.

GSM paging procedure:

Mapping of GSM paging requests to human activity:

TMSI determination based on silent paging e.g. calls to MS dropped before answer (3-5 second “ping” calls):

Interesting YouTube video here:

 

 

Share