On Tue, Apr 5, 2011 at 4:39 AM, Cristian Rougier
I trust you have the co-operation of the GSM operator, or understand the
privacy implications of not having it.
An approach for mapping a number to a device on a specific cell is
in Karsten Nohl’s talk. Basically, you send empty messages in a
particular pattern, and watch as the phone receives (and discards) them.
This doesn’t make it easy to do on a large scale.
From a hardware perspective, while you may get some success with a USRP,
you’re probably better off looking at the Osmocombb project.