# Exploding Pagers in Lebanon {2024-09-17}

**URL:** <https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395>\
**Category:** In My Humble Opinion\
**Created:** [September 17, 2024, 6:27pm UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395 "2024-09-17T18:27:14Z")\
**Posts on this page:** 20\
**Page:** 3

<div class="post-metadata">

**Author:** ![carnivorousplant](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/carnivorousplant/32/3563_2.png) [@carnivorousplant](https://boards.straightdope.com/u/carnivorousplant)\
**Post date:** [September 18, 2024, 1:18am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/41 "2024-09-18T01:18:31Z")

</div>

> [@Stranger\_On\_A\_Train](#):
>
> It’s like being a fry cook; shitty job and a good chance you’re going to get burned, but anyone can get hired, and you can eat your fill of french fries and mozz sticks without anyone noticing.

Good point. And, the girls dig it.

---

<div class="post-metadata">

**Author:** ![carnivorousplant](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/carnivorousplant/32/3563_2.png) [@carnivorousplant](https://boards.straightdope.com/u/carnivorousplant)\
**Post date:** [September 18, 2024, 1:26am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/42 "2024-09-18T01:26:55Z")

</div>

> [@Stranger\_On\_A\_Train](#):
>
> people will hold them up to their face after getting a page to read the number or message,

I saw one explode in a guy’s pocket. I would think a five second timer would work to get the user’s face. I presume the child killed picked up Daddy’s pager when it beeped.

---

<div class="post-metadata">

**Author:** ![Dr.Strangelove](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dr.strangelove/32/6613_2.png) [@Dr.Strangelove](https://boards.straightdope.com/u/Dr.Strangelove)\
**Post date:** [September 18, 2024, 1:39am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/43 "2024-09-18T01:39:59Z")

</div>

> [@Stranger\_On\_A\_Train](#):
>
> just not in such volume

But that’s very significant. It’s one thing to slip a single modified pager into a shipment. You can get some skilled technician to do the work overnight and then probably have a single person on the inside (who can carry it in their pocket). But hundreds or thousands at once? That makes for a vastly more complicated operation. You’d need a team of people to manufacture the modified pagers and swap an entire pallet of them. It would call for a limited production run of the unit, not just a one-off prototype. And of course there are a bunch of details to take care of, like the boxes and serial numbers.

There could not have been _that_ much time between finding out about the order and the actual supply chain injection. Maybe they already knew the model of pager that Hezbollah preferred and modified them in advance, but that takes a fair amount of foresight and means taking a risk on an operation that may never happen. And quite possibly there were multiple models and Israel had to build modified versions of each type, just in case.

And if they had to perform a just-in-time operation–maybe because the serial numbers were known in advance, or the encryption keys were pre-programmed or the like–then it becomes even more difficult, and you’d need hundreds of people to perform the modifications, since it’s going to be a bit suspicious if the shipment hangs out at some facility for a month or two.

---

<div class="post-metadata">

**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\
**Post date:** [September 18, 2024, 2:01am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/44 "2024-09-18T02:01:04Z")

</div>

> [@Dr.Strangelove](#):
>
> You’d need a team of people to manufacture the modified pagers and swap an entire pallet of them.

Seems very doable for Israel. Buy a few pallets of a given pager using some front company.

Modify the pagers with a team of a dozen people who could probably get through a thousand in a week.

Re-package and then slip the pallet in to a shipment going to Lebanon (I have no doubt the Mossad could do that in their sleep).

Rinse and repeat.

---

<div class="post-metadata">

**Author:** ![Stranger\_On\_A\_Train](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@Stranger\_On\_A\_Train](https://boards.straightdope.com/u/Stranger_On_A_Train)\
**Post date:** [September 18, 2024, 2:03am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/45 "2024-09-18T02:03:53Z")

</div>

> [@Dr.Strangelove](#):
>
> And if they had to perform a just-in-time operation–maybe because the serial numbers were known in advance, or the encryption keys were pre-programmed or the like–then it becomes even more difficult, and you’d need hundreds of people to perform the modifications, since it’s going to be a bit suspicious if the shipment hangs out at some facility for a month or two.

Israeli intelligence has a lot of technical capability when it comes to manufacturing and modifying normal objects to contain surveillance and explosive devices. I don’t know if you’ve ever taken apart a pager but because unlike phones they don’t have to pack in a lot of complicated graphics, photographic lenses, and audio, and often have an externally removable battery (as pagers are frequently used by medical personnel and emergency workers who need to be able to replace the battery during a shift) there is a lot of room, certainly enough to pack a few dozen grams of plastique explosives, a tiny EBW detonator and capacitor, and a microcontroller tied into the display (or the buzzer) so all you have to do is open up the case and solder in a few connections. A skilled technician could probably crank out a few of these an hour.

If this was some kind of grey market sale (Hezbollah being considered a terrorist group worldwide it is unlikely that a reputable wholesaler would sell direct to them) it is unlikely the receiver had some previous accounting of serial numbers, and even if they did, it would be easy enough to purchase an order of the identical device in the same quantity, make the mods and alter the serial number and lot markings and firmware, and then just swap them out. Frankly, the purveyor may have been in on the swap; it would not be the first time an adversary purchased communications gear or weapons provided as a ploy to insert sabotaged product.

Stranger

---

<div class="post-metadata">

**Author:** ![DSeid](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dseid/32/20194_2.png) [@DSeid](https://boards.straightdope.com/u/DSeid)\
**Post date:** [September 18, 2024, 2:11am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/46 "2024-09-18T02:11:32Z")

</div>

> [@Stranger\_On\_A\_Train](#):
>
> Frankly, the purveyor may have been in on the swap

What? Moishe’s Pagers R Us, risked their great Yelp reviews?

---

<div class="post-metadata">

**Author:** ![Dr.Strangelove](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dr.strangelove/32/6613_2.png) [@Dr.Strangelove](https://boards.straightdope.com/u/Dr.Strangelove)\
**Post date:** [September 18, 2024, 2:22am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/47 "2024-09-18T02:22:23Z")

</div>

> [@Stranger\_On\_A\_Train](#):
>
> I don’t know if you’ve ever taken apart a pager

No, though I did write a software-defined-radio program to decode local pager signals. Kinda blew my mind, actually, that it’s transmitted totally in the clear. And that they’re still in common use by hospitals and other services (at least as of a few years ago). Confidential medical information just being blasted out.

These were encrypted, though undoubtedly they could have tapped into somewhere on the PCB that contained unencrypted data, or possibly just looked at what was sent to the display device.

> [@Whack-a-Mole](#):
>
> Seems very doable for Israel.

Clearly so. But it’s still a very sophisticated operation. Lots of moving parts that could go wrong.

---

<div class="post-metadata">

**Author:** ![Spiderman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spiderman/32/230_2.png) [@Spiderman](https://boards.straightdope.com/u/Spiderman)\
**Post date:** [September 18, 2024, 2:55am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/48 "2024-09-18T02:55:37Z")

</div>

> [@filmore](#):
>
> It seems like hitting a hornet’s nest with a stick. It doesn’t seem effective enough to really make a dent in Hezbollah, but it does seem like it will make them very upset and motivated to get revenge.

This was their _new_, secure method of communicating, within the past couple of months. Israel just demonstrated they’ve got them figured out really well, & probably picked up a lot of info on Hezbollah members that they previously didn’t know about just by sitting someone on a bench outside of an ER; anyone coming in with a groin, hip, or face injury is now assumed to be Hezbollah & if they have the ability to access medical records of anyone in the ERs today, they probably have name, address, & next of kin, too.  
72 virgins ain’t worth it, I’d be resigning my commission effective immediately if I was a terrorist.

They killed 9, severely injured \> 100, 2800 injured in total, their communications in total disarray, & fear in the membership. I’d say it was an _extremely_ successful operation.

---

<div class="post-metadata">

**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\
**Post date:** [September 18, 2024, 3:13am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/49 "2024-09-18T03:13:06Z")

</div>

As opposed to their reputation of openly selling tech to militias and terrorist groups? Difficult choice… 😛

Whatever purveyors were in on it, it was near the top of the chain; the sabotaged batch was not swapped in last week.

---

<div class="post-metadata">

**Author:** ![Stranger\_On\_A\_Train](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@Stranger\_On\_A\_Train](https://boards.straightdope.com/u/Stranger_On_A_Train)\
**Post date:** [September 18, 2024, 3:25am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/50 "2024-09-18T03:25:29Z")

</div>

> [@Dr.Strangelove](#):
>
> These were encrypted, though undoubtedly they could have tapped into somewhere on the PCB that contained unencrypted data, or possibly just looked at what was sent to the display device.

Israel is also really good at cracking encryption, particularly on mobile devices:

> **[The FBI got into the Trump rally shooter’s phone in just 40 minutes](https://www.theverge.com/2024/7/19/24201935/fbi-trump-rally-shooter-phone-thomas-matthew-crooks-cellebrite)**
>
> The shooter reportedly had a newer Samsung phone.

But given physical access they wouldn’t even have to break through any encryption. An installed microcontroller could pick a particular message going to the display, or a keyed signal to the buzzer/speaker, and just detonate from a message sent to the device in the clear without breaking any broadcast-to-peer signal. This was a pretty elaborate plan but not all that difficult to execute given the technical prowess and logistical capability of Mossad.

Stranger

---

<div class="post-metadata">

**Author:** ![Dr.Strangelove](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dr.strangelove/32/6613_2.png) [@Dr.Strangelove](https://boards.straightdope.com/u/Dr.Strangelove)\
**Post date:** [September 18, 2024, 3:36am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/51 "2024-09-18T03:36:25Z")

</div>

> [@Stranger\_On\_A\_Train](#):
>
> Israel is also really good at cracking encryption, particularly on mobile devices:

Yeah–encryption is _very_ hard to get right, even by serious players like Google or Apple. Some random “encrypted pager” maker? They’re gonna fold like a cheap suit vs. even an amateur cryptographer.

I doubt they needed to decrypt anything on the receiving end for the reasons you state. However, they may have needed to inject an encrypted message on the sending side so that the device would receive it properly. No real obstacle, I suspect.

---

<div class="post-metadata">

**Author:** ![snowthx](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/snowthx/32/10660_2.png) [@snowthx](https://boards.straightdope.com/u/snowthx)\
**Post date:** [September 18, 2024, 3:37am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/52 "2024-09-18T03:37:10Z")

</div>

> [@Dr.Strangelove](#):
>
> But this? Impossible to deny that Israel pulled off an impressive supply chain attack with all that entails. Stuxnet was impressive too, but this even more so.

I was thinking Stuxnet here as well. I am also leaning toward supply chain penetration and modification of the pagers. It seems any nation with a security outfit worth it’s salt has tentacles deep, deep under cover within it’s enemies and has thought-out all kinds of strategies and scenarios.

> **[Stuxnet](https://en.wikipedia.org/wiki/Stuxnet)**
>
> Stuxnet is a malicious computer worm first uncovered in 2010 and thought to have been in development since at least 2005. Stuxnet targets supervisory control and data acquisition (SCADA) systems and is believed to be responsible for causing substantial damage to the nuclear program of Iran. Although neither country has openly admitted responsibility, multiple independent news organizations recognize Stuxnet to be a cyberweapon built jointly by the United States and Israel in a collaborative ef

---

<div class="post-metadata">

**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\
**Post date:** [September 18, 2024, 3:42am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/53 "2024-09-18T03:42:59Z")

</div>

> [@snowthx](#):
>
> It seems any nation with a security outfit worth it’s salt has tentacles deep, deep under cover within it’s enemies and has thought-out all kinds of strategies and scenarios.

I agree. But, it is probably expensive and takes a long time to setup and I would think these are one-time tricks you get to pull. Your enemy, now wise to that crack in their security will probably not be fooled twice. When you build a better mouse trap you will eventually end up with smarter mice.

Obviously, Israel (presumably) thought it was worth playing this card now. I suspect they really do not want a two-front war with Hezbollah and Hamas so they are aggressively back-footing Hezbollah right now.

---

<div class="post-metadata">

**Author:** ![CaveMike](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cavemike/32/16379_2.png) [@CaveMike](https://boards.straightdope.com/u/CaveMike)\
**Post date:** [September 18, 2024, 3:54am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/54 "2024-09-18T03:54:42Z")

</div>

This NYT article has more info [here](https://www.nytimes.com/2024/09/17/world/middleeast/israel-hezbollah-pagers-explosives.html) and answers many of the questions in this thread. I’m sure it’s paywalled, but it came up for me for some reason.

> [@](#):
>
> Israel carried out its operation against Hezbollah on Tuesday by hiding explosive material within a new batch of Taiwanese-made pagers imported into Lebanon, according to American and other officials briefed on the operation.
> 
> The pagers, which Hezbollah had ordered from Gold Apollo in Taiwan, had been tampered with before they reached Lebanon, according to some of the officials. Most were the company’s AR924 model, though three other Gold Apollo models were also included in the shipment.
> 
> The explosive material, as little as one to two ounces, was implanted next to the battery in each pager, two of the officials said. A switch was also embedded that could be triggered remotely to detonate the explosives.
> 
> At 3:30 p.m. in Lebanon, the pagers received a message that appeared as though it was coming from Hezbollah’s leadership, two of the officials said. Instead, the message activated the explosives. Lebanon’s health minister told state media at least 11 people were killed and more than 2,700 injured.

---

<div class="post-metadata">

**Author:** ![Darren\_Garrison](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/darren_garrison/32/92_2.png) [@Darren\_Garrison](https://boards.straightdope.com/u/Darren_Garrison)\
**Post date:** [September 18, 2024, 4:06am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/55 "2024-09-18T04:06:31Z")

</div>

> [@CaveMike](#):
>
> Most were the company’s AR924 model

Looks like they have deleted the product page, but [Archive.org](http://Archive.org) caught it yesterday. (Or still today for some time zones.)

> **[Rugged Pager AR924 - GOLD APOLLO](https://web.archive.org/web/20240529091558/https://www.gapollo.com.tw/rugged-pager-ar924/)**
>
> Rugged Pager AR924 IP67 Dust and WaterproofUp to 85 Days of Battery LifeRechargeable battery with USB-C connector     Rugged Pager AR924           IP67 Dust and Waterproof         Up to...

---

<div class="post-metadata">

**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\
**Post date:** [September 18, 2024, 4:16am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/56 "2024-09-18T04:16:47Z")

</div>

I wonder if the Mossad owned the transport ship and just made all the modifications en route from Taiwan? Plenty of time to do it during the trip with not too many people.

Just a WAG. I hope someday we can learn how it was all accomplished.

---

<div class="post-metadata">

**Author:** ![phs3](https://avatars.discourse-cdn.com/v4/letter/p/8491ac/32.png) [@phs3](https://boards.straightdope.com/u/phs3)\
**Post date:** [September 18, 2024, 4:35am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/57 "2024-09-18T04:35:34Z")

</div>

Some observations/thoughts:

- pagers don’t transmit, so microphones make no sense; power requirements alone…
- any random pager manufacturer can use commodity asymmetric encryption if they want to, so I doubt anyone cracked encryption, not needed
- Hz (as a friend refers to Hezbollah) made a thing about using pagers because they aren’t trackable
- if I were naming this attack/project, it would be something like “MegaHz”
- I sure hope the trigger was a text saying something like “321BOOM!”
- one wonders how they were targeted specifically: a broadcast message (do those still exist for pagers?), or did they build a set of targets through connections - X called Y called Z called A…, and then send to all of them?

---

<div class="post-metadata">

**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\
**Post date:** [September 18, 2024, 4:41am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/58 "2024-09-18T04:41:33Z")

</div>

> [@phs3](#):
>
> one wonders how they were targeted specifically…

All pagers receive ALL pager communications in the area. They just ignore messages not meant for them.

Seems simple enough for the explosive part to have a chip listening for “321BOOM!” even if not meant for that pager.

Given the near 3,000 that went off I do not think they “targeted” anyone. They just set them all off. Perhaps they knew that Hezbollah liked shopping at Pagers-R-Us in Lebanon so made sure the altered pagers all went there.

---

<div class="post-metadata">

**Author:** ![Dr.Strangelove](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dr.strangelove/32/6613_2.png) [@Dr.Strangelove](https://boards.straightdope.com/u/Dr.Strangelove)\
**Post date:** [September 18, 2024, 6:25am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/59 "2024-09-18T06:25:25Z")

</div>

> [@Whack-a-Mole](#):
>
> Seems simple enough for the explosive part to have a chip listening for “321BOOM!” even if not meant for that pager.

Yeah. Good chance there’s a pin on one of the chips with access to the incoming bitstream.

I implemented something like this on a satellite so that I could trigger it to ~~explode~~ reboot remotely. But I wanted it to work no matter what state the main program was in, even totally frozen. So it just looked at the raw incoming radio bytes for a particular string. No other processing, no decoding–just a little state machine that looked for a certain random sequence. Mossad easily could have set up something similar that looked at the bits coming straight from the radio.

I think there were some reports that the pagers buzzed and then exploded a bit later for maximum damage. That might imply they had a real message, though they probably could have engaged the buzzer manually as well.

---

<div class="post-metadata">

**Author:** ![Alessan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/alessan/32/465_2.png) [@Alessan](https://boards.straightdope.com/u/Alessan)\
**Post date:** [September 18, 2024, 7:45am UTC](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395/60 "2024-09-18T07:45:28Z")

</div>

According to Israeli media, the reason the beepers were detonated now is that Israel learned that Hezbollah was getting suspicious of them - maybe some technician had taken one apart and found a strange piece - so it was a “use it or lose it” scenario.

[Previous page](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395.md?page=2)

[Next page](https://boards.straightdope.com/t/exploding-pagers-in-lebanon-2024-09-17/1007395.md?page=4)
