Google has finally rolled out an option on Android allowing users to disable 2G connections, which come with a host of privacy and security problems exploited by cell-site simulators.
The addition of the option was spotted by EFF (Electronic Frontier Foundation), which calls the development a victory for privacy protection.
Caught by “stingrays”
A cell-site simulator, also known as “stingray” or IMSI Catcher, is a device that masquerades as a cell tower, forcing cell phones in their range to connect to it.
This connection enables the operators of these Stingrays to perform man-in-the-middle attacks and intercept sensitive personal information such as:
- Device IMSI (international mobile subscriber identity)
- Call metadata like dialed number and duration
- SMS and voice call content
- Data usage and web browsing history
Unfortunately, this method of data interception has been repeatedly and indiscriminately deployed by law enforcement authorities during peaceful protests in otherwise democratic countries where strict data protection laws apply.
Moreover, documented cases of private deployment of “stingrays” have also been abundant in recent years, so the abuse of communication network vulnerabilities is widespread.
Most of these vulnerabilities have been addressed in 4G, but the simulated base stations have a way to downgrade nearby device connections to 2G, essentially laying the ground for exploiting old flaws.
Having a way to prevent this on the user end is a significant development, and while stopping 2G connections isn’t dealing with the entire spectrum of security problems, it certainly is a good start.
Disabling 2G on Android
While Google has given Android users the option not to allow 2G cellular connections on their device, the setting is turned on by default.
If you want to turn it off, you can go to ‘Settings → Network & Internet → SIMs → Allow 2G’. Depending on your device maker and the Android skin used, the path to access that setting may be different.
Note that this setting has only been made available on Android 12 for now. Bleeping Computer has tested Android 11 and Android 10, but the option is not yet available.
We have asked Google to clarify if there's a hardware requirement too for this new option to work, and they told us that the modem needs to support the 1.6 Radio HAL, which is available only on newer devices.
Also, it’s important to clarify that 2G remains active as a backup for emergency calls no matter what position the toggle is set to, so there’s no way to disable it completely.
Finally, Apple hasn’t given iPhone users a choice to lock their devices to 4G/5G connectivity only, but now that Google has taken that step, it’s likely the competition follows.
Comments
Brncgreen - 2 years ago
Not a big deal but technically this is offered in 10 and 11, at least on my OnePlus Nord. However it isnt exactly called disable 2g but you can select "automatic"(NR,LTE,3g2g) or NR,LTE,etc. There are 2 others but regardless... I just pick NR,LTE so my device will only use 5g4g connection
ibuddy66 - 2 years ago
I'm not sure what devices you're using, but on the S21+ this is not at all an option in Android 12 and One UI 4.0. Looked everywhere. No way to isolate and disallow only 2g connectivity on these devices. Reached out to Samsung and they also they they are not sure there's even a way to do that at all. It may be based on your carrier as well according to them. Some may allow it or others may not. But from their end they can't see that ANYONE has the ability to do this on any Samsung flagship devices.
Vcek - 2 years ago
On almost all Android devices even as old as you can think, if not disabled by Manufacturer, the hidden info menu can be accessed to change network mode to 4G/3G or 4G only or whatever isn't provided in the settings menu.
To check it out : call *#*#INFO#*#* or *#*#4636#*#* then selecting Device Information, scroll down to Preferred Network Type and see what options you have. Changing this setting has to be tested some options may not even work but it's something someone in need may consider as to begging OEM for updates.
On most Samsung Devices : you can access the Bands menu by dialing *#BANDS# or *#2263# and disabling 2G frequencies manually from the menu they are listed as GSM then ticking the option BLOCK SET BY AP