Comment by svnt

Comment by svnt 3 days ago

7 replies

My best guess is explosively formed penetrator in the display.

I don’t think wholesale replacement of the pagers was likely to work for a number of reasons.

They had to go one step up the supply chain.

The EFP display could be set to trigger on a certain message, or even the clearing of a certain message, which in devices without said display would do nothing.

The display is most likely to be pointed at the user’s face, or opposed to their waistline (EFPs sort of fire both ways but in one axis.

The battery, if it were a cylinder as would be likely, would fire tangentially, likely not hitting much.

A prismatic battery would make a good place for an EFP but difficult to interface with and likely requires a second compromised component.

hinkley 3 days ago

Theory: A prismatic battery with an explosive core and an electronic fuse swapped to trigger the explosive instead of disconnect the battery. Firmware change to short the battery. No visible signs of tampering even in iFixit like conditions.

  • svnt 3 days ago

    The best evidence we have now suggests that the devices used had removable (AAA) batteries, not built-in batteries.

    If I was buying pagers and had previously been hit by intelligence ops I would be buying batteries in random supermarkets.

    • hinkley 3 days ago

      I'm looking at pager teardowns and there's nothing even close to the volume of the battery in there. Big transistor and the speaker housing.

      Which sort of leans back toward the theory that nobody checked the pagers at all.

      • svnt 2 days ago

        15g of explosives is sufficient, probably, based on the analysis I’ve seen.

        15g of explosives is not very big.

        The speaker is another potential home, that is a good point. Big cone and heavy magnetics.

        This display weighs 15g, and uses cheap glass and old liquid crystal: https://www.crystalfontz.com/product/cfag12864u3nfhe11-128x6...

        Would someone be able to make one that worked but weighed eg five grams, then fill the rest with explosive? Would anyone be able to discern that the back of the glass wasn’t liquid crystal but explosive, especially as they are usually taped over?

      • [removed] 2 days ago
        [deleted]
  • rolux 3 days ago

    What would happen if you walked through airport security with such a device?

    • svnt 2 days ago

      Nothing, they aren’t looking for 2”x1” sheets of copper within electronic devices, and presumably the thin layer of explosives would be sealed and washed.