Tagged Questions

A telephone, or phone, is a telecommunications device that permits two or more users to conduct a conversation when they are not in the same vicinity of each other to be heard directly.

learn more… | top users | synonyms

5
votes
3answers
324 views

Mutual authentication for humans

Is there any way for two people to securely authenticate each other without access to any special software (like PGP)? For example, when speaking over the phone or by sending SMSes to each other or ...
-1
votes
1answer
200 views

Is There a Premium Rate Phone Check? [closed]

Is there a way, online or otherwise, to check if a phone number is a premium rate number which will charge my bill? It seems there should be some way to do this with certainty. Can phone numbers be ...
6
votes
2answers
293 views

Can a SMS recipient charge any arbitrary fee to the sender without approval?

I received an email from a prospective "client" in broken English. We have been going back and forth about services for a while and he wants me to text him. Is it possible for him to charge me some ...
5
votes
1answer
124 views

Symbiote Counter-Attack Detection

I saw this video on YouTube about hacking Cisco phones (and other embedded systems) and I was overjoyed when the presenter not only hacked, but presented a security solution. Intrigued, I started ...
5
votes
5answers
1k views

How should I safely display my phone number on my Website?

If I display my email address on my Website, I would probably receive a lot of Spam, so I can set up a contact form instead. If I want to display my phone number, how can I prevent unwanted phone ...
1
vote
3answers
1k views

How can hotels securely receive your credit card details (for a custom, one-off payment)?

A hotel belonging to a large chain (400 hotels in 60 countries) has just requested me to send my credit card details via standard (unsecured) email. I have negotiated a deal for accommodation with ...
44
votes
10answers
10k views

If someone asks to borrow your phone to make a call, what could they do?

A stranger walks up to you on the street. They say they lost their phone and need to make a phone call (has happened to me twice, and maybe to you). What's the worst a phone call could do? Let's ...
3
votes
1answer
776 views

Does a TMSI change often enough to prevent tracking?

A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores. However, I don't see ...
1
vote
0answers
55 views

Do the popular smartphone operating system have a cryptographically secure random source? [duplicate]

Possible Duplicate: Do mobile OS’s provide crypto-quality randomness? Linux and Mac OS X has /dev/urandom, Windows has CryptGenRandom. Do iOS and Android have a similar way to generate ...
-1
votes
1answer
397 views

Extremely suspicious phone call — what to do? [closed]

Two days ago, I received a call. Someone with a female, possibly asian voice asked "are you using your computer in internet right now." I said "yes", then asked "who are you?". At this point, they ...
3
votes
2answers
33k views

Can a SIM card be tracked without cell phone and battery?

I have a SIM card alone without cell phone and battery. Can it be be tracked?
7
votes
2answers
2k views

How do I protect my Gmail account when accessing it via an Android smartphone?

I have a Gmail account that I also access via an Android smartphone. The mail account could be used to reset passwords for other online accounts, so I want to tighten up the security around this ...
0
votes
1answer
1k views

Are phone calls normally recorded? [closed]

A person borrowed a cellphone and made a prank call and the following day the police contact the owner of the phone. The constable said "I can pull your call logs and you would have no say in it". My ...
2
votes
1answer
197 views

Which mobile phone OS implements or plan to implement data protection using keys derived from passwords per NIST SP800-132?

NIST has released Special Publication 800-132: Recommendation for Password-Based Key Derivation which is meant for protection of stored data using encryption keys derived from user password. This ...
1
vote
3answers
2k views

Tracing an IP from a mobile broadband ISP

My honeypot caught a hack attempt from an IP that was issued by Three Mobile Broadband (UK). My immediate thought was that most probable explanation was that the user was in the UK and had his ...
27
votes
5answers
13k views

What is preventing us from sniffing the mobile phone communcation?

I'm learning wireless penetration testing. It really is amazing. But it made me wonder, what about mobile phones? They are also means of wireless communication. So, our entire voice must be in the air ...
3
votes
2answers
187 views

Why is location very highly secured info on smartphones?

I can understand that an app needs explicit permissions to access it if the smartphone has a permission system (e.g. Android, Windows Phone). But how does location get so much intention than others ...
25
votes
4answers
11k views

Can A Powered Down Cell Phone be Turned On Remotely?

I know this is tin-foil hat fodder, but at least one judicial opinion (http://www.politechbot.com/docs/fbi.ardito.roving.bug.opinion.120106.txt) referenced a bug that could track/listen in on the ...
28
votes
5answers
38k views

How to trace a (mobile) phone?

Even since growing up, I've watched films in which the "bad guy" is repeatedly tracked down when they call the police or FBI or police force de jour. They always have "about 30 seconds". Regardless ...
3
votes
2answers
2k views

SMS / voice call interception with a fake base station

This answer to a similar topic describes in a detailed way how vulnerable SMS and voice calls are in terms of decryption. In order to do so, an attacker needs to set up a fake base station located ...
8
votes
1answer
16k views

How to spoof a cell phone tower (cell site, base station) — homemade IMSI-Catcher

An answer to a recent question has given me an idea for a school project (security CS program). Also, an active attacker (with a fake base station) can potentially force a mobile phone to use ...
38
votes
6answers
10k views

How hard is it to intercept SMS (two-factor authentication)?

A lot of two-factor authentication mechanisms use SMS to deliver single-use passphrase to the user. So how secure is it? Is it hard to intercept the SMS message containing the passphrase? Do mobile ...
1
vote
1answer
349 views

How should I block BIS connections from accessing my Exchange Server

BIS is a technology from Blackberry that allows end users to connect to an Exchange server without a BES server. The problem is that BES asserts a security policy on the devices, and BIS does not ...
5
votes
3answers
3k views

What makes the Blackberry device and network more secure?

One of Blackberry's strongest assets is the "network" that it uses. Can someone explain, or link to technical information that covers what this secure network is, and what it does better than the ...
5
votes
1answer
550 views

Trying to prevent Cisco toll fraud

A little back story on the setup first; We have a Cisco VoIP setup at our remote office(where I'm at) and the main CCM/CCX/Unity setup is at the parent company across the US in Connecticut. We have ...
21
votes
2answers
1k views

Security implications of rooting Android

My Android smart phone has fancy features that I can get only if I root it, e.g., free-wifi tethering or Cisco VPN (with group name/password). However, the procedure to root my phone makes me ...
14
votes
3answers
403 views

Android security without updates

I have an android phone which, like many others, has quickly become unsupported and is not receiving any updates. At the same time there are publicly available exploits for privilege-escalation ...
2
votes
2answers
446 views

How secure is Goodlink for mobile phones when compared to Activesync?

Some of our more technical users are arguing to use Activesync for their phones, while the corporate standard is limited to Blackberry and any device that supports Goodlink. One argument is the ...
12
votes
2answers
1k views

Protecting cellphones from USB attacks (a.k.a. Juice Jacking)

We have several smartphone with encrypted data on them (BES, iPhone, Android) and want to prevent an unauthorized person from downloading information from the device via USB. The visual assumption ...
5
votes
2answers
522 views

Mobile phone security eavesdropping based on data transfer

is there an easy way for particular governmental organizations (especially in countries where freedom of speech is a problem) have some technology where they can easily eavesdrop on cellphone internet ...
6
votes
2answers
731 views

How can I protect my phone voicemail from being hacked?

With the News of The World Phone Hacking scandal spreading globally amidst allegations that as well as celebrities, victims of September 11 and other major events in the news have had their phone ...
4
votes
2answers
442 views

Cell phone voice mail hacking

The news has been filled recently with the allegations that News of the World employees hacked into the voicemail inboxes of celebrities and crime victims. What flaw was exploited to accomplish this, ...
23
votes
9answers
8k views

Do secure phone lines exist?

I could be out of context here about security, but , I would like to know if phone lines or phone calls over VOIP could be made secure . I know that Skype and other VOIP service providers have to ...