The attacker can always win. ? In GSM the BTS (tower) picks all the settings. ?
Instructs handset on A5 use, Tx power, Rx gain, etc. ? Strong signal + negotiate
A5/0 = pwned. ? Attacker is the tower -> full control of handset. ? Technique
was patented by R&S in Europe in 1993. ? Not sure about the USA, either way
it's ... 
