Skip to main content
11 events
when toggle format what by license comment
Jul 30, 2023 at 18:51 vote accept Arseni Mourzenko
Jul 30, 2023 at 18:51
Dec 24, 2017 at 6:12 comment added Steffen Ullrich @forest: You are correct that it requires the phone number. But I think it is likely that contact information are shared. And it is probably also more likely that somebody at the security conference will try such a hack than at some other events.
Dec 24, 2017 at 6:07 history edited Steffen Ullrich CC BY-SA 3.0
added 1 character in body
Dec 24, 2017 at 6:01 history edited Steffen Ullrich CC BY-SA 3.0
added 361 characters in body
Dec 24, 2017 at 5:58 comment added forest @SteffenUllrich A bug over MMS isn't going to be more or less likely to occur at a security con like DC unless you give out your number. This is more of an answer to whether or not remote exploitation is ever possible, not the security implications of this specific question.
Dec 24, 2017 at 5:54 comment added Steffen Ullrich @SergeBallesta: you are right that MMS needs mobile data for delivery. This means that the exploit can still be sent but it will only be active later once the OP feels safe again and left the dangerous environment and turns mobile data on again. I've edited my answer accordingly.
Dec 24, 2017 at 5:52 history edited Steffen Ullrich CC BY-SA 3.0
added 575 characters in body
Dec 24, 2017 at 0:50 comment added Ismael Miguel @SergeBallesta Actually, I believe you do. You can receive an MMS over GSM/GPRS, if I'm not mistaken.
Dec 23, 2017 at 16:18 comment added Serge Ballesta AFAIK, Stagefright uses a crafted MMS and MMS are not delivered when both mobile data and WiFi are off.
Dec 23, 2017 at 15:12 comment added Ismael Miguel And even then, one could have physical access to your phone and just use an USB-OTG cable and game over.
Dec 23, 2017 at 13:03 history answered Steffen Ullrich CC BY-SA 3.0