From e6b9624a3400fa1b2f2afae9ab5446930e749c1d Mon Sep 17 00:00:00 2001 From: Matthew Callis Date: Tue, 9 Sep 2025 10:48:52 -0700 Subject: [PATCH] =?UTF-8?q?Fix=20typo=20in=20heuristics.md=20phoen=20?= =?UTF-8?q?=E2=9E=9C=20phone?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fix typo in `doc/heuristics.md` `phoen` ➜ `phone` --- doc/heuristics.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/heuristics.md b/doc/heuristics.md index 8628337..a131f7b 100644 --- a/doc/heuristics.md +++ b/doc/heuristics.md @@ -21,7 +21,7 @@ What we consider suspicious is the following chain of events: * Phone connects to a new tower. * Tower asks for phones identity (IMEI or IMSI.) * Authentication does *NOT* happen. -* Tower requests phoen to disconnect. +* Tower requests phone to disconnect. Looking for this chain of events is much less prone to false positives than naively looking for any time the IMSI/IMEI is sent. We do still sometimes get false positives when users are in an airplane that is coming in for a landing however. This is likely do to having been disconnected for a while and then being over towers that are not able to route to your home network, but we are still researching. @@ -75,4 +75,4 @@ On its own this might just be a misconfigured base station (though we have only ### Test Analyzer -This analyzer is great for testing if your Rayhunter installation works. It will alert every time a new tower is seen (specifically every time a tower broadcasts a SIB1 message.) It is designed to be very noisey so we do not reccomend leaving it on but if this alerts it means your Rayhunter device is working! \ No newline at end of file +This analyzer is great for testing if your Rayhunter installation works. It will alert every time a new tower is seen (specifically every time a tower broadcasts a SIB1 message.) It is designed to be very noisey so we do not reccomend leaving it on but if this alerts it means your Rayhunter device is working!