New answers tagged mobile
1
So I was curious what that text in Mandarin Chinese says and run it through an online OCR reader. The text that comes out is 百度浏览器 and (using Google Translate) translates into Baidu browser. Baidu Browser or 百度浏览器 is a browser that can be also downloaded from Google Play and is a perfectly legitimate piece of software.
I suspect all this you're experiencing ...
0
Find the cause
If using "Jelly Bean", it is easy to know that which app make the push notification. Find out which app is pushing ads in my notification bar?
Otherwise, use Addons Detector to find out which apps are using push notifications inappropriately. Though it needs manual inspection.
Scan malicious file with ALYac. It can catch commonly-seen ...
11
@Stolas has already explained that the only way to be sure what an application does is to reverse engineer it and inspect its code, and @RoryAlsop already described why such access permissions are required from the application architectural point of view. But there's one thing that I feel I should add.
I think there's not much to worry about here. Why? ...
6
LinkedIn offers specific functionality to link to your contacts list and calendar. These are parts of the application. Without these permissions it wouldn't work.
At least they are up front about saying what the application does, but it would be nice to have the ability to select specific functions and if you didn't want the calendar function just install ...
10
You could only know for sure by reverse engineering (RCE) the source code. But I recall LinkedIn having a calendar app built in, and using Google Calendar system as a backend.
And, well its spyware in the sense that all social networks are spyware.
0
Read up on these links:
How does HSBC's "Secure Key" actually work?
http://www.fcollyer.com/2012/11/04/digipass-go3-everything-i-know/
http://www.surfnet.nl/Documents/rapport_201105_evaluation_vasco_DP_Nano_1_0_0.pdf
0
MobiTex is still in use. As far as I recall (atleast in EU) the frequencies are lower than "regular mobile frequencies" and hence the coverage is much better. Also alot of companies offer a combination of GPS and GSM/GPRS units to track and send/recieve commands.
It's possible to re-use the cellular tech used for theft tracking for any device that can ...
1
I have to disagree with Lucas Kauffman here and say Yes, it can.
It is entirely possible to track the phone if you have the IMEI and the phone is currently being used with a new SIM. Simply because they are both used to identify with the network.
Now, if your question was 'Will they' instead of 'Can they' I would have to agree with Lucas 100% -- There is ...
2
Very fortunately, radios cannot operate without power. Some systems such as RFID provide external power in the radio signal, but those are all very short range. Very basic AM radios can be powered by the signal itself, but that power is very very minimal. It's certainly insufficient to drive a transmitter.
If your phone is not powered, it can only be ...
7
There was a paper (will try and find it) that gave a very good explanation of a security improvement:
Using one of the digits at least twice, in a pass code of more than 4 digits
Basically, the "swipe a pattern" option is very easy to see - even at a distance it can be shoulder surfed. Have a look at this paper for some interesting information on ...
4
I've wiped down my screen every time I turn it on for quite some time. It's partly due to this problem and partly to increase readability in the presence of glare. I was very interested to find out there is actual research out there on the topic.
While touch screens are especially prone to the problem of physical residue revealing secret information ...
1
Check out Dark Reading. They have quite a few blog entries about this sort of thing and they offer daily and weekly e-mail subscriptions (They'll also sign you up for subscriptions to some of their partner publications). Not all of it on Dark Reading is news, and a bit of it is white papers you have to log in in order to download. Overall they've had some ...
3
I use all ten digits exactly once in a ten-digit pin on my tablet, versus a pattern. I also don't keep anything of particular value on my tablet (the only reason the password is there as a PIN is mandatory to save VPN configuration details with Android -- not including my user password).
Note: using a permutation of all ten digits exactly once does ...
7
This would be a good reason for another method of unlocking that made the unlocking action different every time. For example, instead of the numbers 0-9 being laid out as:
7 8 9
4 5 6
1 2 3
0
it might display them as:
3 5 7
1 2 4
6 9 0
8
Instead of numbers, you could use shapes. Instead of just hitting the shapes or numbers, you could rearrange ...
29
One way to mitigate smudge attacks on smart phones is with an application called WhisperCore, it arranges the numbers vertically and it then asks you to wipe the screen in order to unlock the phone, obfuscating the original smudges.
If you use a pattern to lock your phone, after you input the correct pattern, it presents you a screen full with stars, once ...
8
I for one have always wiped my screen on my shirt after unlocking it specifically because of this (and because I find the finger swipe marks annoying.) But yes, this is very much a risk if you unlock it and don't at least continue to use it for a while to mess up the markings.
A pin code might help some, but you might still be able to see the spots touched ...
50
This is known as a 'Smudge Attack'
It really depends on how much you've used your phone since you've last unlocked it, but the general principle still stands. If you use the pattern feature of Android phones, this can be particularly obvious.
The University of Pennsylvania produced a research paper on the topic and basically concluded that They found they ...
0
Telco operators do not listen to every call.
This is basically resource limited as "telco-switches" work hard enough as is just passing signalling and internal processing. To further answer, not even agencies/organisations listen to every call. They tap what they know they want to in advance (called LI - http://en.wikipedia.org/wiki/Lawful_interception).
...
3
In general, OS vendors implement what network provider wish to see, and network providers are very wary about interfacing the bits which do the actual phoning, with user-provided code. They don't want customers refusing to pay their bills and defending themselves by saying that they did not pass the calls, but some virus on their phone did. Such a defence ...
0
This code won't work indeed on Android 3.0 and above unless app is installed in /system/app partition. Those are now protected settings.
Also it doesn't answer the question of setting DNS when on mobile data instead of WiFi.
2
A normal Web browser will send, as part of its requests to Web servers, a standard header called User-Agent, which usually states the browser vendor, version, and type of machine and operating system on which it is currently running. You can use that to react on some device types. However, this is only for a cooperating client: a malicious user can alter at ...
0
If its a web server, you can install Google analytics that will not only tell you what device is connecting, but # of visits, browser, OS, country, new vs returning visits and much much more.
I am not sure if that's a kind of solution you were looking for but I decided to share this information just in case if you think its valuable. Other members will ...
2
I can't imagine why it would since this is not the domain of MDM, but as commercial suppliers keep trying to build one product to do everything rather than developing platforms which integrate, then it's quite possible I might be wrong.
Any MDM platform should allow you to configure VPN on the devices it controls.
Any browser advertises exactly what ...
2
Google two factor authentication supports the use of one time passwords.
The user is supposed to print off the list (contains approximately 10 one time use passwords if I recall correctly) and keep them in a safe place, in the event the scenario you described above takes place.
9
What I can say, generally, is that you should not have a single point of failure. Be it your mobile phone (can be lost, damaged, stolen), some other computer or device (can be damaged), a piece of paper (can be lost, damaged) or even your memory (can forget things, especially if not used too often).
Just like passwords usually have fallbacks for recovery ...
3
It is possible for operators to fake their caller ID's although i have not heard of them doing it for phone calls in practice.
Certainly they are aware of the phone numbers you call, but considering how many calls would go through their systems each minute, i would say that the answer to your title question "Do telecom operators listen to every phone call?" ...
Top 50 recent answers are included
