Short message (or messaging) service, a system that enables cellular phone users to send and receive text messages.

learn more… | top users | synonyms

1
vote
2answers
320 views

What makes an SMS gateway insecure?

Is it specifically something about SMS protocol, the proprietary software used to do message routing, or perhaps an ACL on the server? I would imagine that a gateway accepting emails from anywhere ...
-1
votes
0answers
7 views

Knowledge base solution access [on hold]

Presently working on a knowledge-based solution platform which I want to be accessed both online /offline via data and sms by searching keywords.... Please I need help with regards to the offline(sms) ...
2
votes
3answers
147 views

Could a spoken (TTS) SMS-based 2FA be intercepted?

In mid-June, Lastpass made news again, and I've since been mowing around the idea of two-factor authentication. After familiarizing myself with SMS and Google Authenticator, I thought the SMS was a ...
0
votes
2answers
122 views

Threatening text messages on my cell phone, 120 in one day but no phone number for sender, how do I get this info?

Threatening text messages on my cell phone, 120 in one day, but no phone number for the sender, how do I get this info? I think they were sent via home pc. What type of wording, code, etc. should I ...
5
votes
1answer
102 views

SMS: Apple has detected multiple failed login attempts

I have just got a SMS message (text message) on my phone saying: Apple has detected multiple failed login attempts Given I don't have (and have never had) an iPhone, I expect it is some sort of ...
1
vote
1answer
96 views

Is originating number tied to an SMS from a mobile phone?

I've been working with an SDR (software-defined radio) as part of a computer security class project. We've been wondering if, let's say a mobile phone associates with the SDR (which is operating as a ...
-3
votes
2answers
79 views

How is two step authentication done in Europe without SMS?

I've heard that SMS use in Europe isn't even close to how much it's used in the US. How do they do two step authentication when a user forgets their password? Is it as simple as just using a robocall ...
13
votes
4answers
2k views

Which verification method should I choose: SMS or call?

I want to enable Two-Factor Authentication for my outlook account, but I'm not sure which method should I choose or in other words which method is more secure? Like I said there are two options: text ...
9
votes
5answers
2k views

Is there any alternative beside sending One-Time-Password via SMS?

I'm working on one smaller system where it will be required to enter One-Time-Password (OTP, not to be confused with a One-Time-Pad) to download sensitive files which will be delivered to the user. ...
0
votes
1answer
60 views

Notice of Credit Card Fraud via text on my phone someone responded how did they do it? [closed]

I received a text alert from Capital One fraud alerting me of unusual activity someone replied to the text confirming the activity. I have an Iphone. How can they get access to my phone and what do I ...
0
votes
0answers
21 views

Is “full loop” and “half loop” authentication the right word to describe this 2FA sequence?

I'm looking for a term to describe this abstract thought about multifactor devices and how they are implemented. In the examples below, there are different levels of device authentication, but the ...
1
vote
1answer
63 views

Unexpected phishing attempt by SMS

I just received this text message (screenshot), which claims to be from the national postal service, informing me that I have a package waiting for me. I have a user account on their website, so them ...
10
votes
3answers
274 views

How does SMS spoofing work practically?

I have been researching the web for information on how I can spoof an SMS myself, but I seem to find more on how to detect it, or how to use tools to do it rather on how to do it myself. I have tried ...
7
votes
5answers
221 views

Secure application data transmission via SMS channel

There are mobile banking applications that use SMS channel to communicate with their server. Some of them offer both internet and sms channels which the customer gets to choose from. While there's ...
1
vote
0answers
205 views

SS7 exploit on the wiretapping part

Wondering if there are info/source code/guide on the SS7 wiretapping part (SMS interception). I had a look on the track any mobile by a German researcher, and on PTsecurity about how the structure ...
4
votes
1answer
80 views

texting password reset link instead of a code

An increasingly common process for assisting with password resets is the application texting a code/token to the user’s verified mobile phone. We have a client which would like to eliminate the need ...
3
votes
1answer
107 views

Security requirements for one time access code/token in the url

I have an application that will send an SMS reminder for user containing a URL to log on. I would like to avoid user typing in username/password and log him in directly. For that I plan to use an ...
7
votes
2answers
279 views

mobile number authorization strategy using SMS, best pattern and practices

In recent years, mobile number has become an important factor for authentication and hence more and more enterprises employ methods to capture their users' mobile numbers using SMS. In a typical ...
1
vote
4answers
136 views

What is the security of one time login with SMS code?

I am writing a web application and I want to let my users to login by sending one time code to a given number. The code will be received by a GSM module within certain time after it's generation and ...
5
votes
1answer
95 views

Can I use a satellite phone for 2 factor auth sms and such?

Would 2 factor authentication SMS messages or other kinds of internet security notifications work with satellite phones? E.g. companies like Google, Paypal, Facebook, banking institutions and others ...
1
vote
2answers
207 views

Pin delivery: SMS, mail, or pin mailer?

Imagine a scenario where a 4-digit pincode needs to be delivered securely to an end-user. Several possibilities exists: Pin mailer (this seems to be standard according to ISO 9564-1) SMS Email Email ...
7
votes
3answers
149 views

Why do Google 2-factor authentication SMS codes never start with a 0? [closed]

When you use 2-step authentication to log to your Google Account, you can get an SMS on your mobile-phone with a G-123456 style code. I think that I never got a code with a leading zero. Is there a ...
3
votes
1answer
838 views

Is TextKey SMS 2 factor authentication secure against cell phone cloning?

I came across this website today that implements SMS based authentication that works "opposite" most SMS authentication methods. In typical SMS authentication, the provider sends you an access code ...
1
vote
1answer
222 views

How to protect against the new malware Mazar Bot?

Mazar Bot is new Android malware that spreads via SMS. Its capabilities: It can read incoming SMS and send itself, make calls to directory contacts, contaminate Chrome, access to the Network, read the ...
0
votes
2answers
452 views

Can someone send a text to a phone and make it appear on another person's phone text message?

A friend said her husband was sleeping on the couch, and she got a text that appeared to come from his phone, but he didn't send the text. Is this possible to do, and, how can she trace the origin? ...
2
votes
1answer
142 views

Capturing text messages on the fly

Suppose your phone is not connected to any network. You are sitting in a cafeteria with 50 other people, everyone is communicating to each other via text messages. Is it possible through any device or ...
2
votes
2answers
683 views

Is it safe to use Google Authenticator app and SMS instead of passwords

I currently want to start web development where I will be making a login system and want an alternative to storing passwords. The question is: is it safe to use the Google Authenticator app as the ...
-1
votes
2answers
56 views

How to secure SMS functionlity in web application?

How to secure SMS sending feature in web applications? If an application is using third party SMS gateway then SMS also can be spoofed. Like attacker can change mobile number with firebug and abuse ...
9
votes
1answer
497 views

Getting strange texts to an iPhone #PWD123456#00X

My dad is getting strange SMS texts to his iPhone 4 Some examples: #PWD123456#WHL003=2308480298 #PWD123456#WHL004=2398480389 #PWD123456#WHL002 #PWD123456#WHL002 #PWD123456#STATUS? #PWD123456#OUT1=...
1
vote
2answers
170 views

Is this spam SMS containing an audio file dangerous?

Yesterday I received a group text message from a number I don't know and opened it by mistake. I was in a group chat with two other people, one in Pennsylvania one in Massachusetts. The message body ...
36
votes
6answers
26k views

What is preventing us from sniffing the mobile phone communication?

I'm learning wireless penetration testing. It really is amazing. But it made me wonder, what about mobile phones? They are also means of wireless communication. So, our entire voice must be in the air ...
1
vote
0answers
96 views

How can one tell is a message is spoofed from one phone to another but “about” a third party? [closed]

This question is about whether the source phone number of an SMS message can be spoofed and, if so, what forensic measures might be taken to determine and prove that that has occurred. Assume that a ...
72
votes
7answers
26k views

How hard is it to intercept SMS (two-factor authentication)?

A lot of two-factor authentication mechanisms use SMS to deliver single-use passphrase to the user. So how secure is it? Is it hard to intercept the SMS message containing the passphrase? Do mobile ...
0
votes
3answers
256 views

How can i prevent my phone from spying through sms

Recently while reading up a article over here ,The following were the summary : hacking suite dubbed Smurf Suite, it can hack any mobile by sending an encrypted text message So based on the ...
1
vote
1answer
98 views

(Theoretically) intercepting GCHQ's smartphone exploit

In the lastest Snowden interview, it was revealed that GCHQ used an exploit sent via SMS to gain access to smartphones, and that this 'exploit' goes unnoticed to the handset user. I was wondering if ...
2
votes
2answers
109 views

How can Authenticity be achieved in SMS or Text Messaging?

What tools or information is needed to verify the authenticity of a SMS message... or to send one so that such authenticity is intact? This answer describes something as a "message center", but I'm ...
1
vote
0answers
120 views

Can someone trace the source of a text msg without a phone number, only a four digit code instead?

I am receiving phishing texts from someone claiming to be from Chase Bank. There is no return phone number at the top, only a four digit number instead. The police tell me that this text (which ...
0
votes
1answer
92 views

Google account 2FA only with HW security key?

Is it possible to configure 2FA access to a Google account using only HW security key (e.g. Yubikey) without verification SMS code option ? It seems that SMS confirmation code is still primary 2FA ...
18
votes
4answers
12k views

Are SMS,MMS stored on the network service providers' servers?

Are SMS and MMS sent via a mobile phone stored on telecommunication service providers' servers before passing them to the recipient? Does it depend on the country or does every network service ...
-3
votes
1answer
112 views

How to sell a new idea – “100% secure communication”, feedback wanted [closed]

I have thought of an idea (new product) to have 100% secure communication between 2 parties and would like your feedback/ideas on how to sell it. Oh, before you start that there is no such thing as ...
4
votes
1answer
126 views

Are “Security SMS codes” any safer than plain SMS?

Many banking webapps send this kind of SMS, for their 2FA systems. These messages do not appear in the main "Messages" app, seemingly being destroyed after viewing - at least on iOS. Firstly, are ...
2
votes
4answers
191 views

Suspicious SMS getting received on selected browsing

I am receiving several suspicious SMS messages with links telling me that I have requested subscription to their services (which I have not) asking me to confirm subscription. These SMS appear only ...
4
votes
1answer
6k views

SMS Spoofing not available in kali

Has the SMS Spoofing option been removed from the Social Engineering Toolkit ? I run 3.14-kali1-amd64. I get only the options shown below. Tried updating both kali and SET but i still dont get the ...
19
votes
3answers
3k views

Could my bank's two-factor authentication be hacked?

When I attempt to log in to my bank, an SMS code is sent to my phone. I then type this nine-character code into the bank's Web site, to login to my account. Is this vulnerable to attack, without ...
1
vote
2answers
143 views

How to deal with SMS spam? [closed]

Every few weeks, I get an annoying SMS trying to sell me something, or trying to get me to click something, or otherwise spamming me. I don't think it's a targeted thing- I think my phone number is ...
-5
votes
2answers
183 views

How do i make a phone number authetication system for my website? [closed]

I really need to prevent users from create multiple accounts. So I was thinking about making a phone number authentication system. Where when a user signs up, a 4 digit code is sent to their phone, ...
1
vote
1answer
120 views

Encode URL in link that will appear on page in plain text?

I need to send a user a link via SMS that when clicked, and then when some demographic info is verified, will allow them to sign up for my service (which is a healthcare portal, so HIPAA/PCI/PII etc). ...
1
vote
1answer
91 views

Are deleted SMS still retrievable from Android-based phones? [closed]

I'm wondering whether deleted SMS on Android phones are retrievable? If so, how is this done? How can one avoid it?
2
votes
2answers
2k views

Is it secure to SMS your Credit card info (or other info) to someone else?

I am buying some products and have mostly communicated with the store via email. I am planning on paying by credit card, but the store doesn't have online billing. Normally, I would just phone the ...
0
votes
1answer
103 views

Is it possible for someone to send messages from my phone and seem like if I send it to them? [closed]

Ok so there's this guy who pays my iPhone6 and lately it's been sending messages to him as if I was the person who typed it but it wasn't me... Does anyone get me? Someone please help!!