A telephone, or phone, is a telecommunications device that permits two or more users to conduct a conversation when they are not in the same vicinity of each other to be heard directly.

learn more… | top users | synonyms

5
votes
2answers
612 views

Has there been any documented cases where hackers have hijacked the phone number to a business?

Has there been any cases where hackers have taken over the phone number to a business, by creating a phone number in the same area code, setting up a virtual PBX / Asterisk system, routing all calls ...
5
votes
3answers
3k views

Which is safer, GSM or CDMA?

I have read in the past (no sure where) that unfortunately there exist illegal devices that permit crooks to eavesdrop on GSM mobile phone conversations. I recently also heard that some people had ...
5
votes
1answer
142 views

Symbiote Counter-Attack Detection

I saw this video on YouTube about hacking Cisco phones (and other embedded systems) and I was overjoyed when the presenter not only hacked, but presented a security solution. Intrigued, I started ...
5
votes
2answers
164 views

What happens when you SIM-unlock a cellphone

In the UK the process for unlocking a mobile phone (cellphone) usually involves either buying an "unlock code" from ebay which you then have to put into the phone to unlock it, or taking the phone to ...
5
votes
1answer
746 views

Trying to prevent Cisco toll fraud

A little back story on the setup first; We have a Cisco VoIP setup at our remote office(where I'm at) and the main CCM/CCX/Unity setup is at the parent company across the US in Connecticut. We have ...
5
votes
1answer
152 views

Hacking/Sniffing/recording GSM like Karsten Nohl

For a course at college, I wanted to reproduce the attack on GSM shown in this video by Karsten Nohl: https://www.youtube.com/watch?v=0hjn-BP8nro. From what I understand he used an USRP radio to ...
4
votes
2answers
555 views

Cell phone voice mail hacking

The news has been filled recently with the allegations that News of the World employees hacked into the voicemail inboxes of celebrities and crime victims. What flaw was exploited to accomplish this, ...
4
votes
1answer
18k views

How to track a Spoofed SMS on Iphone

A mate pulled a quality prank on me the other day by sending me a SMS via a Spoofed number. He's bought a SMS gateway and can set the message ID/phone number to be 'God' (or whatever he wants(letters ...
4
votes
2answers
235 views

Options for simple phone verification with pin delivery

My website needs to verify phone numbers in order to ensure that customers claiming a business actually work there. The service calls and gives the customer a pin which they put into the site. Many ...
4
votes
1answer
171 views

Why do phones send wifi probes?

They could just listen to beacons. Why do they probe for every network you've ever connected to? Do other wireless devices do this? Does Windows, Linux esp. Kali, do this?
4
votes
4answers
420 views

Can my phone be affected by malware through mobile phone signal?

My phone is newly bought. Can a hacker actually scan the mobile phone signal around me, detect it, and put virus/malware into my phone THROUGH the mobile phone signal of my mobile service provider? ...
4
votes
1answer
173 views

Smartphone motherboard - Does it hold any data?

I recently went for a smartphone repair and got its motherboard replaced. However, it didn't occur to me to ask for the damaged motherboard back. I had confidential credentials and data stored. No ...
4
votes
2answers
569 views

Is a fake base station needed for IMSI catching?

If you read about cell phone tracking it looks an IMSI Catcher always uses a fake base station the get the phones IMSI. I don't understand why this is necessary. Couldn't they just passively read the ...
4
votes
1answer
234 views

Random people are coming to my home looking for their lost/stolen cellphones!

Random people are coming to my home saying their lost/stolen cellphone is at my house! The latest person to show up on my door step was at 9pm last night. He said that his "findmyiphone" sent him to ...
4
votes
1answer
288 views

Deal with number changes in a phone number based authentication/login system

Twitter Digits (https://get.fabric.io/digits) provides an authentication/login system based on phone numbers for mobile apps, and several other mobile apps (e.g. Square Cash, ...
4
votes
0answers
50 views

Can I use a satellite phone for 2 factor auth sms and such?

Would 2 factor authentication SMS messages or other kinds of internet security notifications work with satellite phones? E.g. companies like Google, Paypal, Facebook, banking institutions and others ...
3
votes
2answers
58k views

Can a SIM card be tracked without cell phone and battery?

I have a SIM card alone without cell phone and battery. Can it be be tracked?
3
votes
2answers
198 views

Why is location very highly secured info on smartphones?

I can understand that an app needs explicit permissions to access it if the smartphone has a permission system (e.g. Android, Windows Phone). But how does location get so much intention than others ...
3
votes
2answers
197 views

Degree of Obfuscation

Let us assume that I have the following code: namespace MobileApp { public class Storage { public Storage() { } public bool Save() { bool ...
3
votes
1answer
124 views

Windows Phone and Hardcoding Values

Let us say that I have a Windows Phone application. If I hardcode a private key in the Windows Phone application, can people extract it once the application is released to the public on the Windows ...
3
votes
1answer
153 views

Offline phone security

How secure is an offline android phone? Some background. I want to use an app called Bither on android, which allows me to create a cold wallet on 1 phone and a hot wallet on another phone. Cold ...
3
votes
2answers
2k views

SMS / voice call interception with a fake base station

This answer to a similar topic describes in a detailed way how vulnerable SMS and voice calls are in terms of decryption. In order to do so, an attacker needs to set up a fake base station located ...
3
votes
1answer
125 views

How secure is VOIP?

I was at a friend's house who uses VOIP on his own private WiFi for his phone calls. He made a call over VOIP (Voice Over Internet Protocol) that included the need to verbally state his credit card ...
3
votes
1answer
10k views

Is there any way to detect caller ID spoofing?

To be specific the main problem is that I want to detect if the caller ID of the incoming cal I get is real or spoofed? Most VoIP servers now allow their clients to use any caller ID they want. Also, ...
3
votes
0answers
36 views

What are the security implication of implementing an IVR functionality in my application?

I am planning to implement an Interactive Voice Recognition (IVR) functionality in my python-based application. I will be using IVR as a backup verification method or when a user is going to setup her ...
2
votes
2answers
369 views

OFF Pocket or switch off your phone?

OFF Pocket: OFF Pocket is a "privacy accessory for mobile phones to block all signals". To use the OFF Pocket simply place your phone inside the case and close it. Your phone is now OFF. ...
2
votes
1answer
798 views

How to identify call stats about 2/3/4G users in a room?

If someone can please provide some advice about the following problem I am trying to solve it will be great. Scenario: A standard office room, with (say) a couple of people in it What I want to find: ...
2
votes
2answers
204 views

Intercepting business calls and forwarding them back to me

My sister recently went on a sales call and when she told them what company she worked for they were upset. They told her that the company she works for is stealing their customers by intercepting ...
2
votes
1answer
491 views

Can malicious phone software mount a MITM attack on a phone call?

Suppose my smartphone has been compromised and there is malicious software running on it. You can assume that the malicious software has broken out of any sandboxes and is running as root. If I'm on ...
2
votes
2answers
186 views

What's the worst someone could do with my phone unlock code?

When someone is using my cell phone, I will sometimes give them the PIN number to unlock it so they don't have to ask me. Clearly, I only tell the code to people I trust not to mess up my phone. ...
2
votes
1answer
356 views

Is it possible to locate a cellphone's location just by ringing it?

With today's technology, is it possible to locate a cellphone's location just by ringing it, kind of like what we see in movies?
2
votes
1answer
185 views

Find out the identity of the person that called you

I once heard that if a number that you don't know called you, you can access a website (that I don't remember now) that will call the number and make a recording of what the person said and send it to ...
2
votes
6answers
331 views

Deterring Mobile phone Tethering in the workplace

How do you put in controls to prevent a staff using his/her mobile phone to tether 3G/4G connection and download unauthorized files onto the office PC? Of course minimally there must be an AV in ...
2
votes
1answer
102 views

Privacy issues when mobile app has access to phone number and contacts

It seems that when it comes to mobile apps convenience defeats security - always. In particular all messaging/communication apps seem to require to have access to your contacts on the phone and your ...
2
votes
3answers
4k views

Tracing an IP from a mobile broadband ISP

My honeypot caught a hack attempt from an IP that was issued by Three Mobile Broadband (UK). My immediate thought was that most probable explanation was that the user was in the UK and had his ...
2
votes
3answers
220 views

If a phone is encrypted at a platform storage level do I need to encrypt my data stored on it?

I am writing a mobile app which would be expected to store sensitive data. It needs to be stored for offline use. I am wondering now that Android and iOS provide encryption at rest do I need to ...
2
votes
1answer
227 views

Which mobile phone OS implements or plan to implement data protection using keys derived from passwords per NIST SP800-132?

NIST has released Special Publication 800-132: Recommendation for Password-Based Key Derivation which is meant for protection of stored data using encryption keys derived from user password. This ...
2
votes
2answers
509 views

How secure is Goodlink for mobile phones when compared to Activesync?

Some of our more technical users are arguing to use Activesync for their phones, while the corporate standard is limited to Blackberry and any device that supports Goodlink. One argument is the ...
1
vote
3answers
4k views

How can hotels securely receive your credit card details (for a custom, one-off payment)?

A hotel belonging to a large chain (400 hotels in 60 countries) has just requested me to send my credit card details via standard (unsecured) email. I have negotiated a deal for accommodation with ...
1
vote
2answers
147 views

Can bad guys record phone conversations without the carrier's knowledge?

I know that, in most of the world, phone conversations are transmitted as digital data (whether frames in circuit switched protocols or packets). I know that several companies offer products which ...
1
vote
1answer
245 views

Phone got pick pocketed and I got a huge bill

I'm really sorry if this is posted in the wrong section. I did spend some time trying to get it right but I am not sure if this is... I have been exposed to thieves who have stolen my phone and then ...
1
vote
3answers
1k views

Phone location detection

If someone posts something on the internet using their phone's data connection, is it possible to track their location? For example, somehow link their IP address and figure out their location. Or ...
1
vote
1answer
154 views

how do I find out where my sd card was used last [closed]

Someone took my sd card out of my phone and saved information on it that I didn't know about. Is there anyway to find out where my sd card was used last.
1
vote
3answers
308 views

Touch tone phone username and password

I just got off the phone with Fidelity, who manage the health benefits for the company where I work. Before talking to a person, I was prompted to enter my username and password on the numeric keypad: ...
1
vote
2answers
349 views

Could one fit a root application in sim card

In the third Mr.Robot episode a character inserted a Micro-SD card in a smartphone in order to root it and gain information, so I thought maybe someone could fit a root-kit on a Sim-card. Would that ...
1
vote
2answers
222 views

Anonymity of prepaid SIM card in phone linked to real identity

I want to use a prepaid SIM card (text and calls only) anonymously. I bought the SIM card offline without providing any address or name. I am now thinking about using a dumbphone I bought from Amazon ...
1
vote
1answer
384 views

PCI DSS - Recorded Phone Conversations

I am using the using the following image from FishNet Security as a sort of guide for the data flow diagram required by PCI DSS as defined by: 1.1.3 Current diagram that shows all cardholder ...
1
vote
1answer
108 views

Suspicious phone call claiming MS Office not updated lately

I recently received two phone calls where the caller indicated that according to their log activity, MS Office has not been updated lately. They offered to help me get those updates. What kinds of ...
1
vote
2answers
3k views

How to trace virtual phone number?

Suppose I received a call from internet with some virtual number, I called the same number back after few days but it didn't exist at the time or it was routed to some other user. Is there a way to ...
1
vote
1answer
428 views

Why does not GSM use any stream cipher mode (OFB, CFB)?

If I understand correctly GSM uses A5/1 stream cipher. My question is why doesn't it use a stream cipher mode like OFB or CFB?