Short message (or messaging) service, a system that enables cellular phone users to send and receive text messages.

learn more… | top users | synonyms

2
votes
1answer
79 views

Capturing text messages on the fly

Suppose your phone is not connected to any network. You are sitting in a cafeteria with 50 other people, everyone is communicating to each other via text messages. Is it possible through any device or ...
0
votes
2answers
78 views

Can someone send a text to a phone and make it appear on another person's phone text message?

A friend said her husband was sleeping on the couch, and she got a text that appeared to come from his phone, but he didn't send the text. Is this possible to do, and, how can she trace the origin? ...
-1
votes
0answers
40 views

Is there a # code to include location in an sms message

I recently misplaced my phone but can send sms through it using mightytext I was just wondering if there is a hash code that can be included in an sms to get the location of the phone? I found it by ...
4
votes
0answers
49 views

Can I use a satellite phone for 2 factor auth sms and such?

Would 2 factor authentication SMS messages or other kinds of internet security notifications work with satellite phones? E.g. companies like Google, Paypal, Facebook, banking institutions and others ...
1
vote
2answers
116 views

Is it safe to use Google Authenticator app and SMS instead of passwords

I currently want to start web development where I will be making a login system and want an alternative to storing passwords. The question is: is it safe to use the Google Authenticator app as the ...
1
vote
2answers
82 views

Is this spam SMS containing an audio file dangerous?

Yesterday I received a group text message from a number I don't know and opened it by mistake. I was in a group chat with two other people, one in Pennsylvania one in Massachusetts. The message body ...
1
vote
0answers
56 views

How can one tell is a message is spoofed from one phone to another but “about” a third party? [closed]

This question is about whether the source phone number of an SMS message can be spoofed and, if so, what forensic measures might be taken to determine and prove that that has occurred. Assume that a ...
-1
votes
2answers
45 views

How to secure SMS functionlity in web application?

How to secure SMS sending feature in web applications? If an application is using third party SMS gateway then SMS also can be spoofed. Like attacker can change mobile number with firebug and abuse ...
0
votes
3answers
164 views

How can i prevent my phone from spying through sms

Recently while reading up a article over here ,The following were the summary : hacking suite dubbed Smurf Suite, it can hack any mobile by sending an encrypted text message So based on the ...
1
vote
1answer
75 views

(Theoretically) intercepting GCHQ's smartphone exploit

In the lastest Snowden interview, it was revealed that GCHQ used an exploit sent via SMS to gain access to smartphones, and that this 'exploit' goes unnoticed to the handset user. I was wondering if ...
1
vote
1answer
62 views

Is originating number tied to an SMS from a mobile phone?

I've been working with an SDR (software-defined radio) as part of a computer security class project. We've been wondering if, let's say a mobile phone associates with the SDR (which is operating as a ...
2
votes
2answers
86 views

How can Authenticity be achieved in SMS or Text Messaging?

What tools or information is needed to verify the authenticity of a SMS message... or to send one so that such authenticity is intact? This answer describes something as a "message center", but I'm ...
1
vote
0answers
82 views

Can someone trace the source of a text msg without a phone number, only a four digit code instead?

I am receiving phishing texts from someone claiming to be from Chase Bank. There is no return phone number at the top, only a four digit number instead. The police tell me that this text (which ...
1
vote
1answer
71 views

Google account 2FA only with HW security key?

Is it possible to configure 2FA access to a Google account using only HW security key (e.g. Yubikey) without verification SMS code option ? It seems that SMS confirmation code is still primary 2FA ...
-3
votes
1answer
96 views

How to sell a new idea – “100% secure communication”, feedback wanted [closed]

I have thought of an idea (new product) to have 100% secure communication between 2 parties and would like your feedback/ideas on how to sell it. Oh, before you start that there is no such thing as ...
3
votes
1answer
116 views

Are “Security SMS codes” any safer than plain SMS?

Many banking webapps send this kind of SMS, for their 2FA systems. These messages do not appear in the main "Messages" app, seemingly being destroyed after viewing - at least on iOS. Firstly, are ...
-1
votes
2answers
110 views

How to deal with SMS spam? [closed]

Every few weeks, I get an annoying SMS trying to sell me something, or trying to get me to click something, or otherwise spamming me. I don't think it's a targeted thing- I think my phone number is ...
-5
votes
2answers
131 views

How do i make a phone number authetication system for my website? [closed]

I really need to prevent users from create multiple accounts. So I was thinking about making a phone number authentication system. Where when a user signs up, a 4 digit code is sent to their phone, ...
1
vote
1answer
73 views

Encode URL in link that will appear on page in plain text?

I need to send a user a link via SMS that when clicked, and then when some demographic info is verified, will allow them to sign up for my service (which is a healthcare portal, so HIPAA/PCI/PII etc). ...
1
vote
3answers
91 views

Could a spoken (TTS) SMS-based 2FA be intercepted?

In mid-June, Lastpass made news again, and I've since been mowing around the idea of two-factor authentication. After familiarizing myself with SMS and Google Authenticator, I thought the SMS was a ...
0
votes
1answer
81 views

Are deleted SMS still retrievable from Android-based phones? [closed]

I'm wondering whether deleted SMS on Android phones are retrievable? If so, how is this done? How can one avoid it?
2
votes
2answers
495 views

Is it secure to SMS your Credit card info (or other info) to someone else?

I am buying some products and have mostly communicated with the store via email. I am planning on paying by credit card, but the store doesn't have online billing. Normally, I would just phone the ...
0
votes
1answer
89 views

Is it possible for someone to send messages from my phone and seem like if I send it to them? [closed]

Ok so there's this guy who pays my iPhone6 and lately it's been sending messages to him as if I was the person who typed it but it wasn't me... Does anyone get me? Someone please help!!
3
votes
1answer
51 views

Securing 2 factor data from apps that are co-located on the same device?

Several apps such as GMail, Coinbase, Yahoo and others require the use of the mobile device to gain access to the data within the app. For example Gmail requires TOTP in Google Authenticator ...
2
votes
4answers
158 views

Suspicious SMS getting received on selected browsing

I am receiving several suspicious SMS messages with links telling me that I have requested subscription to their services (which I have not) asking me to confirm subscription. These SMS appear only ...
1
vote
1answer
209 views

What makes an SMS gateway insecure?

Is it specifically something about SMS protocol, the proprietary software used to do message routing, or perhaps an ACL on the server? I would imagine that a gateway accepting emails from anywhere ...
8
votes
1answer
1k views

If I know a currently working exploit to spoof SMS on a major carrier, what should I do? [closed]

This currently works on all iPhones and one known android phone as of today, a formal complaint has been filed with the carrier and the FCC. I doubt they will do anything about it though since this is ...
3
votes
1answer
289 views

Can sms-only authentication be safe?

many Android mobile applications (e.g., Whatsapp, Telegram), when used for the first time on a device, "authenticate" users by sending them a secret code in a SMS message. The same mechanism is used ...
1
vote
1answer
108 views

verify an api call is made from the mobile device [duplicate]

I am developing a webserver and provide an API to be used by mobile clients. Some of my calls are without any authorization, for example, to start the authentication process. Is there a good way/best ...
4
votes
1answer
5k views

SMS Spoofing not available in kali

Has the SMS Spoofing option been removed from the Social Engineering Toolkit ? I run 3.14-kali1-amd64. I get only the options shown below. Tried updating both kali and SET but i still dont get the ...
2
votes
2answers
78 views

Secure alerting for a monitored web application

What is a good method to receive security alerts? Email is the first thing that springs to mind, although it is susceptible to MITM attacks (e.g. an attacker preventing the email from being ...
1
vote
2answers
174 views

Is it safe to rely on text messages as a means on authentication?

Many websites, including banks, use text messages as their primary or secondary means of authentication. In theory, it sounds like a perfect method unless the user loses their phone or has it infected ...
2
votes
2answers
17k views

Trace source and destination of an SMS message [closed]

Is it possible to trace the source or destination (location, even coordinates) of an SMS message ? If it is, is it possible to do it even if the phone is roaming in a different country ?
-2
votes
1answer
279 views

Spoofing SMS messages [closed]

I received a message recently on a droid phone that appeared to have originated from an Iphone in my contact list. I was able to look at the Iphone from which the message appeared to have originated ...
1
vote
2answers
2k views

Could “receive SMS online” site be a scam?

There is a site that allows you to see all SMS received by a certain set of phone numbers (owned by the site). This seems to be meant for services that require two-factor authentication using SMS, ...
18
votes
4answers
10k views

Are SMS,MMS stored on the network service providers' servers?

Are SMS and MMS sent via a mobile phone stored on telecommunication service providers' servers before passing them to the recipient? Does it depend on the country or does every network service ...
2
votes
2answers
348 views

Does Google 2-step verification protect user from session hijacking?

After signing in Google 2-Step verification scenario, user should enter verification code which sends to his mobile. Without it, he couldn't access to Gmail account. Consider an attacker does session ...
3
votes
1answer
156 views

What Information is Exposed When I Send A Message From My Mobile Device

When I send a text message and/or an email, with or without location services turned on, what information is available to the recipient of that message if they know how to read the data behind the ...
3
votes
1answer
133 views

Should an administrator be able to turn off TFA for a user

We use Google Authenticator and SMS for two factor authentication. Should we allow the administrators of the site to turn off TFA for users? Google Auth uses SMS as backup option but SMS does not ...
0
votes
1answer
107 views

Do normal SMS risks apply to DigiCel mobile banking? What mitigations are likely in place?

In this interview with Bill Gates and Bill Clinton, they discuss their work with Digicel, who I assume is this company, to enable mobile banking with normal KYC protections. This site is full of ...
12
votes
1answer
2k views

TextSecure protocol

Is anyone aware of an analysis of the TextSecure protocol? https://whispersystems.org/blog/simplifying-otr-deniability/ https://github.com/WhisperSystems/TextSecure/wiki/Protocol It is a ...
6
votes
3answers
992 views

Why does a spam sms contain a link to an email address?

A colleague of mine just received a (spam) sms with this message: Congratulations! Your mobile have won $1,000,000,00 Pounds with Draw# 294 64/2013. For more info & claims, contact our ...
7
votes
2answers
1k views

How do I forensically determine whether a mobile phone has been infected with a spy suite?

What is the best way of forensically determining that spyware software has been installed on the phones without making any changes to the phone(s)? I have Blackberry and iPhone 4 phones that are ...
9
votes
1answer
501 views

Is there a list of phone numbers Facebook uses to send auth tokens?

Up to a few days ago, I always received Facebook auth tokens from numbers +181338477XX, except a few times from +85294985XXX. Problem is that lately I've been receiving codes directly from Italian ...
19
votes
3answers
2k views

Could my bank's two-factor authentication be hacked?

When I attempt to log in to my bank, an SMS code is sent to my phone. I then type this nine-character code into the bank's Web site, to login to my account. Is this vulnerable to attack, without ...
3
votes
1answer
759 views

Is TextKey SMS 2 factor authentication secure against cell phone cloning?

I came across this website today that implements SMS based authentication that works "opposite" most SMS authentication methods. In typical SMS authentication, the provider sends you an access code ...
2
votes
1answer
158 views

Send credentials by sms [duplicate]

If a user forgets his login credentials for a web site, is it secure enough to send users credentials by sms?
8
votes
1answer
471 views

Getting strange texts to an iPhone #PWD123456#00X

My dad is getting strange SMS texts to his iPhone 4 Some examples: #PWD123456#WHL003=2308480298 #PWD123456#WHL004=2398480389 #PWD123456#WHL002 #PWD123456#WHL002 #PWD123456#STATUS? ...
-1
votes
1answer
603 views

Is it still possible to sign up for a Google account without SMS verification? (March, 2013) [closed]

Non of these two methods worked: http://googlesystem.blogspot.com/2012/01/new-google-accounts-require-gmail-and.html
2
votes
2answers
2k views

Retreive header from SMS iphone

I received a lot of SMS from a guy where the phone number change every time. I can answer to these SMS, so I think it's only a spoofing of the sender ID of the SMS header which will be displayed in ...