The “Burning Man” Private Networks

The “Burning Man” Private Networks

The history of this company traces back to OpenBTS, an all-software GSM stack that was started and largely written by Legba’s founder. And cellular networks at the Burning Man festival figure largely in the history of OpenBTS. These networks gave us our first experiences with large private networks (large coverage areas and many subscribers) in very challenging circumstances. (All photos in this post were taken by our camp teams.) What is Burning Man? Burning Man started in the early 1990’s as a gathering of performance artists and anarchists on an alkali flat in the Black Rock Desert of northern Nevada. …

The “Burning Man” Private Networks Read More »

Ad Hoc Private Networks in GSM

Introduction NiPC (“network in a PC”) is a mode of operation supported by YateBTS that allows the basestation to operate in 2.5G GSM/GPRS mode without a core network. While YateBTS NiPC mode does support normal authentication and ciphering with a local SIM database, NiPC also offers a feature that bypasses all security procedures and allows a phone to connect without authentication. Although we have moved along to private LTE/5G networks like everyone else in the world, there are still some use cases where this bypass can make GSM/GPRS as the best (or only) choice. This article describes the 2G security architecture that …

Ad Hoc Private Networks in GSM Read More »

Public Warning Systems in Mobile Networks

Introduction Cell broadcast (CB) is a way to deliver a text message to large numbers of handsets over the cellular network. Its main use today is the delivery of Public Warning System (PWS) messages, also called CMAS, ETWS, Presidential Alerts, EU-Alerts, or other names in different parts of the world. The Legba Lab Kit supports PWS messages through standard signaling from a core network, or through file-based configuration and command line controls (not requiring a core network). This makes the Lab Kit an easy and inexpensive way to test with PWS messages, for handset testing, for testing emergency message content …

Public Warning Systems in Mobile Networks Read More »


Engineering 4 Change OpenBTS Presentation Mention!

Engineering for Change has mentioned our founder and CEO for Legba INC in their presentation on learning how to deploy mobile voice and data communication networks for remote communities. Kurtis Heimerl leads this E4C Webinar that highlights some of the projects that are possible with OpenBTS cellular networks. Then he showcases real world remote community deployments offering voice and SMS services! YateBTS, the successor to OpenBTS, is the basis for our GSM radio access network products, products that remain relevant in the current era of CSFB. For more information on these products, see the YateBTS web site, or send an …

Engineering 4 Change OpenBTS Presentation Mention! Read More »

CSFB with the Legba Lab Kit

Introduction Many 4G networks cannot carry plain old telephone calls, so many mobile operators support voice calls by transferring the handset to a 2G or 3G network for the duration of the call. The procedure for doing this is called “Circuit-Switched Fallback”, or CSFB. CSFB is an interesting procedure from a network operation perspective and from a security perspective. With a pair of Legba LabKits, one in 2G mode and one in 4G mode, you can reproduce and modify the CSFB procedure on a test bench. The “Why” and “What” of Circuit-Switched Fallback Circuit-Switched? What is that anyway? Since 1876, …

CSFB with the Legba Lab Kit Read More »

Scroll to Top