Field notes
From the air interface.
Short essays on identity, proximity, and modeling. They are briefing notes, not vulnerability tickets.
The IMSI is not the identity
Hiding a subscriber number in 5G did not delete the graph of radio behaviors that still correlate a person across cells, devices, and time.
Proximity is not authentication
Unlock, payment, and “the keys are nearby” flows still treat distance as a credential. Distance is a measurement. Measurements can be arranged.
Threat models for things that radiate
STRIDE survives contact with RF if the data-flow diagram includes beacons, pairing, and the stranger in the collision domain.