rtlamr VS IMSI-catcher

My municipal water meter transmits readings in the clear on the 915 MHz band. There's a neat program to catch the readings: https://github.com/bemasher/rtlamr

Great - thanks for sharing this! I have an enphase system that shows me my production in HA, and I can read my solar and net meters using rtlamr to figure out consumption. I use the Utility Meter helper to create a sensor showing my current net meter change. When this number is negative, I'm sending energy to the grid, and when it's positive, I'm taking energy from the grid. What I'm trying to figure out is how to create sensors that will be acceptable to the Energy Dashboard so that I can get nice graphics like you have. showing how much energy is going to or from the grid. Any help greatly appreciated.

this varies by meter but if you are into tech you can listen for the broadcasts with a rtl-sdr and https://github.com/bemasher/rtlamr software

Using an RTL-SDR device configured to read meter data. I have it connected to my HomeAssistant smarthome setup to log the data and populate energy usage dashboards.

I disagree, 20 quid dongle on amazon and rtlamr allows you to read many common meters. From usage you can tell when someone is cooking, showering, or not at home. Thieves already use more advanced tech to steal cars so it's only a matter of time before this is used to scope houses for burglaries.

Absolutely! I'm using a Nooelec NESDR Mini as a Software Defined Radio connected to a raspberry pi that's running a program called RTLAMR, which will pickup all the Automated Meter Reader signals in the area. There's some research you'll have to do to find your meter ID, manufacturer, and protocol, but once you have it narrowed down to your meter you can publish the entries to an MQTT instance using rtlamr2mqtt, where Home Assistant can pick it up and use it to track your total energy consumption.

Smart meters for electricity/gas/water: https://github.com/bemasher/rtlamr

I'll do you one better:

For GSM, basic IMSI sniffing: https://github.com/Oros42/IMSI-catcher

https://github.com/Oros42/IMSI-catcher this is the one I got working, there are others on Github

GSM signals https://github.com/Oros42/IMSI-catcher

I would start with ss7 and IMSI catcher in particular. There is also a project on git hub that might give some more insights. There are a bunch of tutorials on how to set it all up on YouTube. But it all basic. I think Juilliard have to dive into the protocols themselves. Though maybe I don’t know something.

imsi-catcher

But people are playing around with such things for educational purposes. Might be easier for some law enforcement officer to pull IMSI logs from the relevant time from providers... IANAL and don't know anything about US law.

This project goes a decent job at passively observing 2G: https://github.com/Oros42/IMSI-catcher An RTL2832U dongle is enough to get started.

Also, IMSI (actually, a randomised version (TMSI)) is sent in the clear over the air - see https://github.com/Oros42/IMSI-catcher https://en.wikipedia.org/wiki/Mobility_management#TMSI. IMEI should be encrypted as far as I remember. But that's not very useful to intercept anyway as it's just an indicator of the phone (and can be altered)

Have you looked at this on GH? https://github.com/Oros42/IMSI-catcher

https://github.com/Oros42/IMSI-catcher :)