Questions tagged [phone]

A telephone, or phone, is a telecommunications device that permits two or more users to conduct a conversation when they are not in the same vicinity of each other to be heard directly.

52
votes
7answers
10k views

How can caller ID be faked?

My late brother was contacted by someone on landline number operated by a carrier in Australia and which displayed on caller ID. I traced the number to a company and though they did call him on a ...
2
votes
1answer
171 views

Is this foreign call some kind of scam and what kind is it?

Every few days I get a call on my mobile phone from a number like 370 621 65748, which seems to be a Lithuanian number, but it only rings once and then disconnects. It happens enough to seem ...
1
vote
1answer
169 views

How secure is full-disk encryption technology on LineageOS, or Android phones in general?

We're attempting to assess the information security on our mobile devices, and information seems rather varied on the question of encryption. Is the encryption technology employed by Android-based ...
1
vote
2answers
150 views

Samsung Galaxy S7- If I drain the battery so its dead and remove the simcard, can it's location be tracked down?

I got 2 questions regarding my Samsung Galaxy S7- Q1) If I drain the battery so its dead and remove the simcard, can it's location be tracked down? I'm asking about a dead battery vs removing the ...
3
votes
0answers
124 views

Can SS7 attacks intercept SMS sent to a Google Voice number?

Hackers are able to steal 2FA SMS messages by exploiting SS7. As far as my understanding goes, this means gaining access to the SS7 system and then broadcasting a message akin to "This number is ...
0
votes
1answer
75 views

On a mobile, does using a password instead of a PIN make encryption stronger?

On a mobile, does using a password instead of a PIN make encryption stronger? What key does the phone use for its encryption? Would it use the PIN itself?
2
votes
1answer
150 views

What happens if incorrect SIM card PUK entered 10 times?

I know that if incorrect SIM card PIN is entered three times, it is erased, so there is no longer any valid PIN, but user can set up new PIN with PUK. But when incorrect PUK is entered 10 times, it is ...
1
vote
0answers
195 views

Strange inbound MMS messages

We received some strange inbound MMS messages on our Twilio account today. Our account was not compromised, as there are no suspicious outbound messages sent from our number via Twilio. We first ...
1
vote
1answer
170 views

Getting called from hidden caller ID, what are the dangers if I answer?

My girlfriend has been getting calls on her iPhone from a hidden caller ID for several days in a row now. She has not answered any of them because we figured it can't be anything good if it's hidden. ...
1
vote
0answers
93 views

Can mobile service providers use my iPhone's microphone to listen even when I'm not on a call?

So is this technically possible? Basically can the service provider somehow hack into my phone and use the microphone to hear the surrounding of my phone if they somehow have a backdoor/malicious code ...
0
votes
0answers
25 views

Most accessible yet secure way to verify a user over the phone who has an account online

We have a service where people register online and log fairly sensitive records. They might want to phone up and ask for a status update on these records. At the time they are calling, they may not ...
3
votes
0answers
36 views

How do I report scam phone calls? [duplicate]

I get scam phone calls on a regular basis. The latest one was a computer-generated voice claiming to be a security expert from Microsoft and alleging "errors and fraudulent behavior" within my ...
0
votes
0answers
56 views

Can they trace the phone and find the location when it is switched off? [duplicate]

Is it possible to trace a telephone when it is switched off and without a battery and without a sim? And the SIM without being connected to the phone can be traced and located?
0
votes
0answers
22 views

Security risks in allowing IP phones to easily auto-configure

I wonder what are the main security risks in allowing Voice VLAN ports to provide QoS and most VoIP deployment configurations (via auto configuration) to the phones? Since it's best practice to ...
9
votes
3answers
288 views

What is future of SMS 2-step authentication?

Google, Facebook and most of the important websites (banks, payment sites, etc...) use SMS as the major method for authorization (in case of 2 step auth) or for controlling the account (password reset,...
0
votes
0answers
50 views

How to delete data on a “keypad mobile” securely before selling it?

Nokia, Model: C1-01, Type: RM-607 How to delete data on a "keypad mobile" securely before selling it?
3
votes
3answers
140 views

When websites use SMS as part of a password reset scheme, why do they ask for the user's phone number?

I've noticed if you do a password reset on iCloud, for example, it prompts you for your phone number before sending the SMS. Since many people already know your phone number, or it may be listed ...
0
votes
1answer
215 views

Can a SIM-less smartphone be tracked only by IMEI?

If in the phone is no SIM card, connection to cell towers is at my own behest. But what about the opposite way, can the local base stations search for a specific phone through its IMEI? Question ...
2
votes
0answers
73 views

Can (the carrier of) a caller/callee see the position of the other ones mobile phone?

Someone came to me with the following request: He/She wants to drive somewhere without the employer knowing in his/her free time. If the employer will know about the drive, it will be bad for his/her ...
2
votes
1answer
71 views

How can Huawei (or any other telecom vendor) provide verifiable security assurance?

IMHO, It is in Huawei's (and all other equipment manufacturer's) best interest to preclude \ prevent any party from remotely breaching security. All government actors monitor communications by ...
1
vote
2answers
129 views

What are the security implications of losing a paper calendar?

Assuming I have a paper calendar (organizer) with the following information on it: dates/locations where I have been and where I'm planning to go phone numbers and e-mail addresses of a few people my ...
2
votes
2answers
210 views

How to securely destroy old cellphone, to avoid personal data recuperation?

While cleaning I've found an old cellphone. This phone does not turn on, and I'm not sure if contains personal data. I would like to throw away this phone, but I'm concerted if this data can be ...
1
vote
3answers
121 views

Are DTMF tones decoded by the DTMF producer?

If I generate a DTMF(dual tone multi frequency) tone on phone A, clearly the tone gets decoded by the other phones (phone B, C...) on the call. Does the DTMF tone also get decoded by phone A? How is ...
8
votes
3answers
282 views

Is a second, “old” (dumb) phone dedicated just to receiving bank tokens as safe as “modern” (smart) phone?

Are old phones safer / safe / as safe as modern smartphones when it comes to auth-tokens / confirmations tokens? Is SMS encrypted?
4
votes
1answer
156 views

GSM - Implementing Cipher Mode Command on YateBTS

I've been studying on Yate & YateBTS source code for a while, and I was wondering why there is no ciphering mode implementation in the source!? I use the combination of BladeRF x40 FPGA and ...
10
votes
1answer
457 views

How secure is a land line phone call?

What are the risks of communicating sensitive information using a land line? Once my voice gets digitized does the carrier use encryption during transport? We have all heard about rogue cell towers (...
0
votes
1answer
106 views

How are USSD messages used and who could send them?

Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be "USSD messages" in an app recording notifications (com.evanhe.nhfree). There is a Wikipedia ...
1
vote
3answers
951 views

Can we wipe an Android phone completely using Encryption and Factory Wipe? (Samsung Galaxy S7 to be exact)

Can we wipe an Android phone completely using Encryption and Factory Wipe? (Samsung Galaxy S7 to be exact) I have a Samsung Galaxy S7. I believe cell phones use flash storage (like SSD) and its not ...
0
votes
1answer
567 views

Mobile call encryption [duplicate]

Is the signals of a mobile phone-call encrypted between the phone and the mobile-tower or only between the towers? And is it possible for a non-authority individual to eavesdrop on your conversation ...
29
votes
4answers
4k views

How should I verify a caller is from the bank or company they claim? [duplicate]

I often get telephone calls from my personal bank, mortgage provider or utility companies. In most cases they start by asking me to verify my identity through the usual name/address/date of birth or ...
-3
votes
1answer
705 views

How To detect Fake mobile number for SMS verification [closed]

I am facing some issues regarding SMS verification in my website. Suddenly, some transactions are happening using the fake numbers like https://www.receive-sms-online.info How to detect the number is ...
1
vote
2answers
63 views

At What Point Does A Device Correspond/Link to its Owner?

I am aware that governments, organizations and hackers can do a plethora of things to your device (i.e. track your location, tap calls, etc.), but I can only assume that they can only do these things ...
2
votes
1answer
82 views

Can Apple Devices Give Away Location to Hackers?

In a hypothetical scenario, I am travelling with my iPhone to, let's say, New Zealand. I stop at some random hotel and simply stay there doing nothing but staring at a wall for days with no ...
2
votes
1answer
133 views

Phone Number Appears to Have Been Temporarily Hijacked

What Happened: At 8:40am Telegram sends me a login code via the Telegram desktop app. At 8:44am Telegram informs me that someone has logged into my account via ip address #1 (appears to be PIA vpn) I ...
0
votes
0answers
43 views

VoIP/SIP Secured Real Time Protocol (SRTP): Which key length is appropriate nowadays?

Many critics say that current key lengths for SRTP-encryption in popular phone apps like Linphone or CSipSimple are not sufficient anymore. What should be a recommended key length nowadays?
1
vote
2answers
163 views

Can my company see the contents on my iPhone if I used my work email on it?

I'm temporarily employed at a company and I needed to send a quick email to one of my coworkers yesterday explaining that I was going to be late for my shift. I couldn't reach them by phone and didn’...
0
votes
1answer
203 views

Can malware be installed on a mobile phone when the user opens an sms?

Is it possible for an adversary send malware over messages? I mean, when the victim clicks on the message sent by the attacker, a malware should be installed into his phone (in background). The hacker ...
5
votes
1answer
691 views

How secure are IMEI numbers?

I recently had my phone stolen (Galaxy S8) and have done the following: Wiped it remotely Reported the theft to network operator, who have allegedly blocked the IMEI I have tried searching for ...
3
votes
2answers
135 views

Possibility of business calls/leads being professionally stolen? [closed]

Is it possible our VoIP calls being redirected from our intended phone number to another phone number unknown to us? Our VoIP number is currently forwarded to mobile phones and computer phones. ...
2
votes
1answer
112 views

Privacy concern: Services requiring a phone number for signing up

Whenever a service requires an e-mail address for creating an account, I feel mildly uncomfortable, but I can easily eliminate my privacy concerns by setting up a new e-mail address that forwards mail ...
0
votes
3answers
490 views

Tracking phone in country when SIM is not supported [closed]

Can the police track my cell phone if I left the country and went to another one and the SIM card is not supported by the country I went to?
0
votes
3answers
770 views

If you phone is seized, can you erase sim or stop them from cloning?

If your phone (for example, an iPhone) gets seized by the police, do they have sufficient technology to copy sim card (or any data) even if you cancel you provider and put phone in lost mode? If so, ...
2
votes
1answer
105 views

Dangers of giving away Cell phone details

I got a spam call saying saying they are upgrading my plan but needed some details. Obviously I knew what it was and gave them fake info. My question is given the information they asked for what are ...
2
votes
1answer
291 views

Are there any known exploits targeting Google Authenticator on Android phones?

My Android 7.0 phone is somewhat lagging behind on the security updates, a situation I cannot change unfortunately (unless I would root the phone). I am not too concerned about this in general since ...
0
votes
0answers
286 views

How do 'fake cell towers' work? And besides bugging and tracking what are they used for?

A friend of mine used an app that detects suspicious cell towers and has been getting warnings today. He is worried about the possibility that someone may be specifically targeting him, which leads me ...
3
votes
2answers
3k views

Is Paypal's 2FA Security really this bad? [closed]

I'm by now means an expert in this field, or even well versed, but if it's possible to do this, I can't comprehend how Paypal allows it. Say you have 2 factor authentication on, with your phone setup ...
3
votes
3answers
1k views

I connected to a suspicious public wifi using my phone. Is it possible that my phone was hacked?

I recently was outside looking for public wifi because my android mobile internet wasn't very good. I went past a garage that had free wifi apparently, so I went up there and connected to their wifi. ...
10
votes
5answers
486 views

What is the best protocol for an organisation to make phone calls to clients, where the client is required to verify their identity?

I've experienced a couple of times, an organisation has called me, but they require me verify who I am with security questions. Most recently, this was my credit card company who left a voice ...
4
votes
4answers
472 views

Phone number setup for security

Several Q&As here highlight the danger of phone hacking. For example, this. In a nutshell, the solution is to NOT give your phone number, except to your bank or government. Unfortunately, that ...
3
votes
1answer
196 views

How can I know that whoever called me is my cellphone service provider?

I just refused to give my credentials to a phone call operator who called me. and I wonder whether I did the right thing. Background. My cellphone operator (call them Alpha) uses a simple ...