A telephone, or phone, is a telecommunications device that permits two or more users to conduct a conversation when they are not in the same vicinity of each other to be heard directly.

learn more… | top users | synonyms

5
votes
2answers
630 views

Mobile phone security eavesdropping based on data transfer

is there an easy way for particular governmental organizations (especially in countries where freedom of speech is a problem) have some technology where they can easily eavesdrop on cellphone internet ...
5
votes
2answers
323 views

Sensitive data and phone calls

How safe is it to give sensitive information to someone over a phone line? Does it matter if the data was verbally spoken or if it was typed in? Example: Opening an account with an internet provider ...
5
votes
1answer
163 views

Voice Call Safety

When i was dealing with an assistant of my bank through mobile call, she asked me to insert my bank login code after a beep. I was wondering if this procedure is secure against a malicious agent who ...
5
votes
2answers
1k views

Does a TMSI change often enough to prevent tracking?

A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores. However, I don't see ...
5
votes
3answers
112 views

Ways to protect phone from hacking through a wifi network when travelling

I'm planning on traveling to a resort in Mexico. The resort offers wifi, but I know someone who recently traveled to this resort and had their phone hacked via the wifi network. I would be wanting to ...
5
votes
2answers
116 views

Security implications of android rooting

I know this question has been asked many times, but I didn't see a clear answer to it from security experts, or it is from several years ago and things might have changed. My question is double: ...
5
votes
2answers
621 views

Has there been any documented cases where hackers have hijacked the phone number to a business?

Has there been any cases where hackers have taken over the phone number to a business, by creating a phone number in the same area code, setting up a virtual PBX / Asterisk system, routing all calls ...
5
votes
3answers
3k views

Which is safer, GSM or CDMA?

I have read in the past (no sure where) that unfortunately there exist illegal devices that permit crooks to eavesdrop on GSM mobile phone conversations. I recently also heard that some people had ...
5
votes
1answer
94 views

Can I use a satellite phone for 2 factor auth sms and such?

Would 2 factor authentication SMS messages or other kinds of internet security notifications work with satellite phones? E.g. companies like Google, Paypal, Facebook, banking institutions and others ...
5
votes
1answer
147 views

Symbiote Counter-Attack Detection

I saw this video on YouTube about hacking Cisco phones (and other embedded systems) and I was overjoyed when the presenter not only hacked, but presented a security solution. Intrigued, I started ...
5
votes
2answers
189 views

What happens when you SIM-unlock a cellphone

In the UK the process for unlocking a mobile phone (cellphone) usually involves either buying an "unlock code" from ebay which you then have to put into the phone to unlock it, or taking the phone to ...
5
votes
1answer
772 views

Trying to prevent Cisco toll fraud

A little back story on the setup first; We have a Cisco VoIP setup at our remote office(where I'm at) and the main CCM/CCX/Unity setup is at the parent company across the US in Connecticut. We have ...
5
votes
1answer
314 views

Hacking/Sniffing/recording GSM like Karsten Nohl

For a course at college, I wanted to reproduce the attack on GSM shown in this video by Karsten Nohl: https://www.youtube.com/watch?v=0hjn-BP8nro. From what I understand he used an USRP radio to ...
4
votes
3answers
4k views

How can hotels securely receive your credit card details (for a custom, one-off payment)?

A hotel belonging to a large chain (400 hotels in 60 countries) has just requested me to send my credit card details via standard (unsecured) email. I have negotiated a deal for accommodation with ...
4
votes
2answers
563 views

Cell phone voice mail hacking

The news has been filled recently with the allegations that News of the World employees hacked into the voicemail inboxes of celebrities and crime victims. What flaw was exploited to accomplish this, ...
4
votes
2answers
4k views

How to trace virtual phone number?

Suppose I received a call from internet with some virtual number, I called the same number back after few days but it didn't exist at the time or it was routed to some other user. Is there a way to ...
4
votes
1answer
21k views

How to track a Spoofed SMS on Iphone

A mate pulled a quality prank on me the other day by sending me a SMS via a Spoofed number. He's bought a SMS gateway and can set the message ID/phone number to be 'God' (or whatever he wants(letters ...
4
votes
2answers
1k views

How are “fake cell towers” detected

With the recent (and not so recent) news about fake cell towers popping up in different part of the world, I was wondering how these are detected (from a technical point of view). I'm not really ...
4
votes
2answers
252 views

Options for simple phone verification with pin delivery

My website needs to verify phone numbers in order to ensure that customers claiming a business actually work there. The service calls and gives the customer a pin which they put into the site. Many ...
4
votes
1answer
223 views

Why do phones send wifi probes?

They could just listen to beacons. Why do they probe for every network you've ever connected to? Do other wireless devices do this? Does Windows, Linux esp. Kali, do this?
4
votes
4answers
546 views

Can my phone be affected by malware through mobile phone signal?

My phone is newly bought. Can a hacker actually scan the mobile phone signal around me, detect it, and put virus/malware into my phone THROUGH the mobile phone signal of my mobile service provider? ...
4
votes
2answers
713 views

Is a fake base station needed for IMSI catching?

If you read about cell phone tracking it looks an IMSI Catcher always uses a fake base station the get the phones IMSI. I don't understand why this is necessary. Couldn't they just passively read the ...
4
votes
1answer
165 views

How secure is VOIP?

I was at a friend's house who uses VOIP on his own private WiFi for his phone calls. He made a call over VOIP (Voice Over Internet Protocol) that included the need to verbally state his credit card ...
4
votes
1answer
141 views

Can a SIM card propagate malware?

Is it possible that malware can infect a SIM card? What will happen when I insert the SIM card in another phone?
3
votes
2answers
66k views

Can a SIM card be tracked without cell phone and battery?

I have a SIM card alone without cell phone and battery. Can it be be tracked?
3
votes
2answers
203 views

Why is location very highly secured info on smartphones?

I can understand that an app needs explicit permissions to access it if the smartphone has a permission system (e.g. Android, Windows Phone). But how does location get so much intention than others ...
3
votes
2answers
207 views

Degree of Obfuscation

Let us assume that I have the following code: namespace MobileApp { public class Storage { public Storage() { } public bool Save() { bool ...
3
votes
1answer
125 views

Windows Phone and Hardcoding Values

Let us say that I have a Windows Phone application. If I hardcode a private key in the Windows Phone application, can people extract it once the application is released to the public on the Windows ...
3
votes
2answers
326 views

What's the worst someone could do with my phone unlock code?

When someone is using my cell phone, I will sometimes give them the PIN number to unlock it so they don't have to ask me. Clearly, I only tell the code to people I trust not to mess up my phone. ...
3
votes
1answer
106 views

Google Hangout Dialler exposes user ID

Recently, I got in touch with an online supplier of commodity service. Since they are located in location out of country of my residence I used GoogleTalk's IP phone service ‘Hangout Dialler’ as it’s ...
3
votes
1answer
206 views

Privacy issues when mobile app has access to phone number and contacts

It seems that when it comes to mobile apps convenience defeats security - always. In particular all messaging/communication apps seem to require to have access to your contacts on the phone and your ...
3
votes
1answer
168 views

Offline phone security

How secure is an offline android phone? Some background. I want to use an app called Bither on android, which allows me to create a cold wallet on 1 phone and a hot wallet on another phone. Cold ...
3
votes
2answers
3k views

SMS / voice call interception with a fake base station

This answer to a similar topic describes in a detailed way how vulnerable SMS and voice calls are in terms of decryption. In order to do so, an attacker needs to set up a fake base station located ...
3
votes
1answer
230 views

Smartphone motherboard - Does it hold any data?

I recently went for a smartphone repair and got its motherboard replaced. However, it didn't occur to me to ask for the damaged motherboard back. I had confidential credentials and data stored. No ...
3
votes
1answer
14k views

Is there any way to detect caller ID spoofing?

To be specific the main problem is that I want to detect if the caller ID of the incoming cal I get is real or spoofed? Most VoIP servers now allow their clients to use any caller ID they want. Also, ...
3
votes
0answers
43 views

What are the security implication of implementing an IVR functionality in my application?

I am planning to implement an Interactive Voice Recognition (IVR) functionality in my python-based application. I will be using IVR as a backup verification method or when a user is going to setup her ...
2
votes
2answers
378 views

OFF Pocket or switch off your phone?

OFF Pocket: OFF Pocket is a "privacy accessory for mobile phones to block all signals". To use the OFF Pocket simply place your phone inside the case and close it. Your phone is now OFF. ...
2
votes
1answer
869 views

How to identify call stats about 2/3/4G users in a room?

If someone can please provide some advice about the following problem I am trying to solve it will be great. Scenario: A standard office room, with (say) a couple of people in it What I want to find: ...
2
votes
2answers
229 views

Intercepting business calls and forwarding them back to me

My sister recently went on a sales call and when she told them what company she worked for they were upset. They told her that the company she works for is stealing their customers by intercepting ...
2
votes
1answer
530 views

Can malicious phone software mount a MITM attack on a phone call?

Suppose my smartphone has been compromised and there is malicious software running on it. You can assume that the malicious software has broken out of any sandboxes and is running as root. If I'm on ...
2
votes
1answer
174 views

Scam caller claimed to have elderly friend's “Windows unique identifier”

An elderly friend received a telephone call similar to this Information Security SE post and this one. The caller claimed that my friend's computer had a problem that needed to be fixed. My friend ...
2
votes
6answers
432 views

Deterring Mobile phone Tethering in the workplace

How do you put in controls to prevent a staff using his/her mobile phone to tether 3G/4G connection and download unauthorized files onto the office PC? Of course minimally there must be an AV in ...
2
votes
1answer
417 views

Is it possible to locate a cellphone's location just by ringing it?

With today's technology, is it possible to locate a cellphone's location just by ringing it, kind of like what we see in movies?
2
votes
1answer
227 views

Find out the identity of the person that called you

I once heard that if a number that you don't know called you, you can access a website (that I don't remember now) that will call the number and make a recording of what the person said and send it to ...
2
votes
3answers
4k views

Tracing an IP from a mobile broadband ISP

My honeypot caught a hack attempt from an IP that was issued by Three Mobile Broadband (UK). My immediate thought was that most probable explanation was that the user was in the UK and had his ...
2
votes
1answer
102 views

How to verify if a phone number is an online SMS account as opposed to a genuine SIM card

We are using Authy for phone number verification on our website. It is very easy to create a free online SMS account through Twilio or other providers. Is there any way to determine whether the phone ...
2
votes
3answers
249 views

If a phone is encrypted at a platform storage level do I need to encrypt my data stored on it?

I am writing a mobile app which would be expected to store sensitive data. It needs to be stored for offline use. I am wondering now that Android and iOS provide encryption at rest do I need to ...
2
votes
1answer
232 views

Which mobile phone OS implements or plan to implement data protection using keys derived from passwords per NIST SP800-132?

NIST has released Special Publication 800-132: Recommendation for Password-Based Key Derivation which is meant for protection of stored data using encryption keys derived from user password. This ...
2
votes
2answers
522 views

How secure is Goodlink for mobile phones when compared to Activesync?

Some of our more technical users are arguing to use Activesync for their phones, while the corporate standard is limited to Blackberry and any device that supports Goodlink. One argument is the ...
2
votes
0answers
23 views

How can I ensure that phone app traffic is using HTTPS? [duplicate]

When I access a website, I know just by looking at the URL whether it's HTTPS or HTTP. If I'm using an app on my phone, I cannot see this. So if say the app wants me to enter a password in to create ...