Welcome back, my aspiring cyberwarriors!

New technological developments in recent years has made it possible to build a private cellular network at very low cost. This can be useful to many organizations who place their privacy at a premium such as firms engaged in research and development of intellectual property (IP) or law firms, to name but a few.. You can read here how the Mexican drug cartels built their own private cellular network to evade both law enforcement and competitors snooping.

This article was written by one of our most advanced students, Astra. Astra is an ardent supporter of Ukraine’s freedom and an advanced student of low cost cellular networks.

If you want to learn more about setting up a private 4G LTE network, enroll in our SDR for Hackers: Building a Private 4G Network!

In this article, he will demonstrate how to build your own 4G LTE network!

LTE Networks

The concept of private LTE itself is not new. There are ready-made solutions that allow you to lease frequencies and deploy such network at your enterprise. But, of course, all this equipment is not suitable for a one-time testing experience, so we will launch a network based on SDR.

If in the world of open-source stacks GSM is ruled by Osmocom, then here in 4G LTE the undoubted leader is  srsRAN. This is a completely open-source software that with minimum configuration allows us launching this kind of network.

srsRAN can be built from source, but I recommend using DragonOS, which has already been mentioned many times by OTW, where this software is already included in the distribution.

There is also another similar project which is LibreCellular that uses slightly different hardware, but the key concept is the same of srsRAN.

How LTE works

 

Let’s understand how this network (RAN, Radio Access Network) works.

It is a network that utilizes frequencies more efficiently and provides much faster performance compared to GSM and 3G.

It consists of three key components:

EPC (Evolved Packet Core)

This the operator’s core network. Its main component is the MME (Mobility Management Unit), through which all signaling traffic from UEs (User Equipment) passes. This node is responsible for service transfer, calling, authentication and many other operations. Its other parts are the billing service and gateways (service and packet), which provide data exchange between parts of the network and other networks. Connected to the core network is the HSS (Home Subscriber Server), a secure database where encryption keys and subscriber information are stored. In a GSM network, the role of this node is played by the home register (HLR).

eNBs (eNodeB).

These are the base stations. LTE operates in a wide range of frequencies, from 450 to 2600 MHz. Their use varies from country to country, as some of these frequencies are already reserved for something else. Like GSM, there are channel numbers here too – the E-UTRA Absolute Radio Frequency Channel Number (EARFCN).

The whole spectrum of frequencies is divided into broad sections (LTE bands), the choice of which differs from country to country.

UE (User Equipment).

These are the devices that connect to the network such as phones and modems.

What does it take to get your own LTE network up and running?

In order to reproduce everything that I will be describing below, you will require some specific hardware and specific configuration.

For this test you will need:

1)      A linux and a windows machine.

2)      A full duplex SDR with proper antennas. B210, BladeRF, and LimeSDR are suitable.

3)      A sim card reader

4)      Programmable LTE USIM cards

5)      An android smartphone

Let’s start 

Boot into DragonOS and plug in the SDR.

Navigate to the /etc/srsran folder.

dragonos> cd /etc/srsan

You’ll find the configuration files there.

dragonos > ls -l

In the enb.conf file we will modify two parameters: MCC and MNC

These parameters are identical to those used in GSM networks – they are country code and network code. Normally, we should use some arbitrary values, but the problem is that most phones refuse to work when they see strange values for network. That’s why we need to specify the MCC of the country we live in or use the 999 which is the value for private enterprise networks. With regards the network code (MNC) make sure to set one that doesn’t belong to any operator working in your country.

 

 

[enb]

enb_id = 0x19B

mcc = 999

mnc = 01

mme_addr = 127.0.1.100

gtp_bind_addr = 127.0.1.1

s1c_bind_addr = 127.0.1.1

s1c_bind_port = 0

n_prb = 50

#tm = 4

#nof_ports = 2

 

 

Modify the epc.conf file in the same way:

 

[mme]

mme_code = 0x1a

mme_group = 0x0001

tac = 0x0007

mcc = 999

mnc = 01

mme_bind_addr = 127.0.1.100

apn = srsapn

dns_addr = 8.8.8.8

encryption_algo = EEA0

integrity_algo = EIA1

paging_timer = 2

request_imeisv = false

lac = 0x0006

full_net_name = astra00011

short_net_name = astra00011

 

Now in two separate terminal run first sudo srsepc and then sudo srsenb.

Now take your phone and go to search for networks manually. If we are lucky we’ll see a network, depending on which values you set, starting with 99913. If we try to connect to this network, we will surely fail – the phone will connect a bit and then give a sad “No service”.

It’s all about authentication. That is what we are going to deal with now.

 

Fire up a windows machine and plug in the sim card reader. Insert a blank sim into the reader.

I am using a non open source software to read/write on sims. There are other options such as pysim.

Once the sim card is read, we can proceed writing the required parameters.

The key parameters required by srsRAN are the IMSI, KI and OPC.

The first field to fill in is to write value for ICCID. The ICCID number should be a unique 19 digit identifier for the SIM card itself. It should composed by the following:

 

Field	Description	Example
Major Industry Identifier	Always set 89 for telecommunication purposes	89
Country Code	2 or 3 digit country code as defined by by ITU-T recommendation E.164.	01
Issuer Identifier	1 to 4 digits. Usually the MNC code.	23
Individual Account Identifier	Variable account identification number.	000000000001

Next we need to generate an IMSI (international mobile subscriber identity) number. This 15 digit number is used to uniquely identifier each user of a cellular network.

Field	Description	Example
MCC	Mobile Country Code	999
MNC	Mobile Network Code	23
Individual Account Identifier	Account identifier (usually the same as the one in the ICCID but chopped here to stay in the 15 digit limit)	0000000001

Next step is to generate the KI value (subscriber key), which is known only by the subscriber and network and used to authenticate the device on the network. We also need to generate a OPC (operator code derived) value.

I used the following script to generate 128-bit values for both Ki and OPC:

Then fill in the last parameters which consists in:

PLMNwAct: A user-managed list of preferred Public Land Mobile Networks (PLMNs) ranked by priority, along with the corresponding access technologies (2G/3G/4G/5G, etc.).

 

OPLMNwAct: An operator-controlled version of the user-preferred PLMN list mentioned above.

 

HPLMNwAct: The Home PLMN, including the specified access technology, identifies the network associated with the subscriber’s identity, represented as a combination of Mobile Country Code (MCC) and Mobile Network Code (MNC) with the access technology included.

 

EHPLMN: A list of Equivalent Home PLMNs. Networks in this list are treated as equivalent to the home network, meaning the device won’t consider itself roaming when connected to them. This field can be useful, for example, when operators merge, allowing each to include the other’s

 

PLMN in this list (though the original source for this suggestion could not be verified).

 

FPLMN: A list of forbidden PLMNs that the device should not automatically attempt to register with. This can be used to avoid all specified local public mobile networks.

If everything was correctly set up, once you insert your programmed sim card in your smartphone, you should be able to see something like this in the network parameters:

Notice that we still don’t have any mobile connection (top right corner icon)

Lastly, we need to choose the radio frequency for transmission and reception, which is conveniently represented by an EARFCN (Evolved-UTRA Absolute Radio Frequency Number). srsRAN supports exclusively FDD (Frequency Division Duplexing), where the mobile device’s downlink and uplink operate on separate frequencies. By specifying the downlink EARFCN, srsRAN can determine the corresponding downlink frequency. This can be done in the /etc/srsran configuration folder in the rr.conf file.

The final step to complete the whole configuration is edit the user_data.csv file. This file includes the SIM card identity that we previously configured. This file is utilized by the Home Subscriber Service (HSS). The information programmed into the SIM cards is now necessary for operation.

Keep in mind that srsRAN does not support calls and SMS, only internet connectivity. Calls are possible with VoLTE but this involves additional components such as the IP Multimedia Subsystem (IMS) that srsRAN does not natively include.

Now’s the time to raise our 4G LTE network:

In two separate terminals type:

>sudo srsepc

followed by

sudo srsenb

Success! We have our own private 4G LTE network!

Summary

It is now possible to create your own 4G LTE network with low cost components and a bit of expertise! These networks can be invaluable to those who place a high priority upon privacy and confidentiality. This is key in a era where competitors or nation state actors may be inside your mobile carrier’s system.

To learn more about SDR (Signals Intelligence), join our SDR (Signals Intelligence) program or our Subscriber Pro training package.

Jolla is "trying again with a new crowd-funded smartphone," reports Phoronix: Finnish company Jolla started out 14 years ago where Nokia left off with MeeGo and developed Sailfish OS as a new Linux smartphone platform. Jolla released their first smartphone in 2013 after crowdfunding but ultimately the Sailfish OS focus the past number of years now has been offering their software stack for use on other smartphone devices [including some Sony Xperia smartphones and OnePlus/Samsung/ Google/ Xiaomi devices]. This new Jolla Phone's pre-order voucher page says the phone will only produced if 2,000 units are ordered before January 4. (But in just a few days they've already received 1,721 pre-orders — all discounted to 499€ from a normal price between 599 and 699 €). Estimate delivery is the first half of 2026. "The new Jolla Phone is powered by a high-performing Mediatek 5G SoC," reports 9to5Linux, "and features 12GB RAM, 256GB storage that can be expanded to up to 2TB with a microSDXC card, a 6.36-inch FullHD AMOLED display with ~390ppi, 20:9 aspect ratio, and Gorilla Glass, and a user-replaceable 5,500mAh battery." The Linux phone also features 4G/5G support with dual nano-SIM and a global roaming modem configuration, Wi-Fi 6 wireless, Bluetooth 5.4, NFC, 50MP Wide and 13MP Ultrawide main cameras, front front-facing wide-lens selfie camera, fingerprint reader on the power key, a user-changeable back cover, and an RGB indication LED. On top of that, the new Jolla Phone promises a user-configurable physical Privacy Switch that lets you turn off the microphone, Bluetooth, Android apps, or whatever you wish. The device will be available in three colors, including Snow White, Kaamos Black, and The Orange. All the specs of the new Jolla Phone were voted on by Sailfish OS community members over the past few months. Honouring the original Jolla Phone form factor and design, the new model ships with Sailfish OS (with support for Android apps), a Linux-based European alternative to dominating mobile operating systems that promises a minimum of 5 years of support, no tracking, no calling home, and no hidden analytics... The device will be manufactured and sold in Europe, but Jolla says that it will design the cellular band configuration to enable global travelling as much as possible, including e.g. roaming in the U.S. carrier networks. The initial sales markets are the EU, the UK, Switzerland, and Norway.

Read more of this story at Slashdot.

CNN's prediction for 2026? "Any device that uses memory, from phones to tablets and smartwatches, could get pricier." But will it be a little or a lot? The article cites an analysis from multinational strategy/management consulting firm McKinsey & Company which found America's data center demand could continue growing by 20 to 25 percent per year" through 2030. "That's prompted memory manufacturers like Micron and Samsung to shift their focus to data centers, which use a different type of memory, meaning fewer resources for consumer products. (Jaejune Kim, executive VP for memory at Samsung, said in October that their third quarter saw strong demand for memory for AI and data centers, and that they expected the supply shortage for mobile and PC memory to "intensify further.") Memory prices are rising for consumer products because major manufacturers are instead ramping up production for AI data centers as artificial intelligence companies boom. "It's pretty much brutal and crunched across the board," said Yang Wang, a senior analyst at Counterpoint Research. The International Data Corporation, a global market research firm, reported earlier this week that the smartphone market is expected to decline by 0.9% in 2026 in part because of memory shortages. Memory prices are expected to surge by 30% in the fourth quarter of 2025 and may climb an additional 20% early next year, Counterpoint Research said last month... TrendForce, a research firm that follows the semiconductor industry, estimates memory price hikes have made smartphones 8% to 10% more expensive to produce in 2025 (higher production costs don't always translate into higher consumer prices for a variety of reasons). Some smartphones could cost more as soon as early next year, said Nabila Popal, a senior research director for the International Data Corporation. Cheap Android phones may see the biggest impact, since less expensive products usually have thinner margins. "It's going to be almost impossible for them to not raise prices" of cheaper Android phones, said Popal. Companies may also postpone phone launches to focus on expensive models that may be more profitable. The average selling price for smartphones is expected to climb to $465 in 2026, compared to $457 in 2025, according to Popal, putting the smartphone market at a record high value of $578.9 billion. But the pendulum is expected to swing back in the other direction late next year as the supply chain adjusts, according to Popal and Wang, potentially bringing prices back down or at least capping increases.

Read more of this story at Slashdot.

A severe spike in global DRAM prices has pushed Samsung Semiconductor to refuse a long-term RAM order from its own sibling, Samsung Electronics. The move is forcing the smartphone division into short, expensive renegotiations, which will likely mean higher costs for consumer devices. PCWorld reports: Samsung subsidiaries are, naturally, going to look to Samsung Semiconductor first when they need parts. Such was reportedly the case for Samsung Electronics, in search of memory supplies for its newest smartphones as the company ramps up production for 2026 flagship designs. But with so much RAM hardware going into new "AI" data centers -- and those companies willing to pay top dollar for their hardware -- memory manufacturers like Samsung, SK Hynix, and Micron are prioritizing data center suppliers to maximize profits. The end result, according to a report from SE Daily spotted by SamMobile, is that Samsung Semiconductor rejected the original order for smartphone DRAM chips from Samsung Electronics' Mobile Experience division. The smartphone manufacturing arm of the company had hoped to nail down pricing and supply for another year. But reports say that due to "chipflation," the phone-making division must renegotiate quarterly, with a long-term supply deal rejected by its corporate sibling. A short-term deal, with higher prices, was reportedly hammered out.

Read more of this story at Slashdot.

At an event in Seoul on Tuesday, Samsung unveiled the Galaxy Z TriFold, a dual-hinged smartphone that unfolds into a 10-inch tablet (source paywalled; alternative source). It launches on Dec. 12 in Korea for about $2,450. The company plans to sell the phone in the U.S., but hasn't shared pricing. Bloomberg reports: Samsung's device has a different hinge design, folding inward from two sides whereas the Mate models take on a Z shape when being folded. When closed, the TriFold's outer screen offers similar dimensions to a regular smartphone. But when unfurled, it provides a tablet-style experience with a 10-inch display, larger than the panel on the Galaxy Z Fold 7. In the tablet-like mode, each of the device's screens can independently run a different app. This provides the equivalent of three separate 6.5-inch bar-style handsets side by side. Using Samsung's DeX software, which has been tweaked for this particular hardware type, you can also run a desktop-like experience directly on the large inner display. (Other Samsung phones must be plugged into an external monitor to activate DeX mode.) In DeX, the TriFold can operate as many as four distinct workspaces that can each run five apps simultaneously. To preempt concerns about potential breakage, Samsung said it has refined the phone's hinges, aluminum frame and display technology to improve long-term durability. The company will also offer a one-time 50% discount on display repair costs should one eventually be needed. At its thinnest point, the TriFold measures 3.9 millimeters (0.15 inch). Inside, it contains a 5,600 milliamp-hour battery, marking the largest capacity that Samsung has used in a folding phone so far. The battery provides as much as 17 hours of consecutive video playback with the TriFold display fully open. However, in specifications shared with Bloomberg, the company didn't say how long it expects the battery to last with typical usage.

Read more of this story at Slashdot.

A new study from the University of Pennsylvania finds that preteens who own smartphones by age 12 have significantly higher odds of depression, obesity, and poor sleep compared to their peers. Axios reports: Kids who owned a smartphone at age 12 were found to have about 31% higher odds of depression, 40% higher odds of obesity and 62% higher odds of insufficient sleep than their peers who didn't have one. The researchers analyzed data from the National Institutes of Health-supported Adolescent Brain Cognitive Development Study assessments conducted between 2016 and 2022. The study included responses from 10,588 youths. Kids who had smartphones were more likely to be female, Black or Hispanic, and from lower-income households. The study has been published in the journal Pediatrics.

Read more of this story at Slashdot.