2022 Developer Survey is open! Take survey.

Questions tagged [phone]

A telephone, or phone, is a telecommunications device that permits two or more users to conduct a conversation when they are not in the same vicinity of each other to be heard directly.

Filter by
Sorted by
Tagged with
1 vote
1 answer
63 views

How is the stream cipher key shared on GSM?

I read that phones encrypt communication (GSM as implemented in 2G,3G..) - particularly voice as SMS are unencrypted - using a stream cipher. Symmetric Stream ciphers use the flip-flop machinery to ...
user avatar
  • 15
2 votes
0 answers
63 views

Receiving phishing text messages

I get a phishing messages on SMS every now and then. I'm not sure if it's from anyone that knows me. What information can I get about the sender of the SMS?
user avatar
0 votes
0 answers
48 views

Is it possible to inject code using physical memory access to jailbreak phones?

Is it possible to inject code into RAM using physical access? For example desolder the RAM chips, solder something between the original RAM chip and the phone motherboard, and use that to directly ...
user avatar
0 votes
2 answers
131 views

Can dumb-phones be turned into bugs?

Is it possible for an advanced attacker to use a dumb-phone (such as, say, Nokia 105) to spy on its owner through the microphone?
user avatar
0 votes
0 answers
12 views

Do you need physical access to hack a BT land line before an outgoing call is made (dialing tone)

Do you need physical access to hack a BT land line before an outgoing call is made (dialing tone)? I understand if you have physical access you could just put something in another phone socket. But, I ...
user avatar
  • 1
0 votes
0 answers
17 views

Is there a standard way to do point-to-point voice encryption at the PBX level?

I am pretty dissatisfied with the typical options for encryption found on standard IP phones like those from Cisco and Polycom. Is there a standard way to do point-to-point voice encryption at the PBX ...
user avatar
  • 1,116
0 votes
0 answers
72 views

What equipment would an attacker need to infect a SIM card?

I'm aware that SIM cards can store malware according to this question but what equipment would be needed to do such an attack? For example, would you need a Computer and a SIM card reader or could it ...
user avatar
1 vote
2 answers
219 views

Effective ways to hash phone numbers?

Suppose a company wants to implement 2FA for it's users using phone number OTP system, but does not really want to store their phone numbers as it could get breached and phone numbers are considered ...
user avatar
0 votes
1 answer
126 views

What is the impact of someone accidentally getting my IMEI number from my Android phone? [duplicate]

I have a concern regarding how risky it is if someone knows or has the copy of my 2 IMEI numbers. As we all know, on Android phones, the IMEI are at the back cover of the phone like a sticker. So, my ...
user avatar
0 votes
0 answers
102 views

What should i do if i gave someone my imei number? Is there anything I can do to make if safer?

I lost my phone yesterday, and today, I went to imei.info to file a lost report. However, after filing the report, I'm starting to doubt what i just did. Because i chanced upon a remark that imei.info ...
user avatar
  • 1
2 votes
1 answer
110 views

Is there any truth to the (to me) bizarre idea that you can "track" a phone call better depending on how long it goes on? [duplicate]

I have heard many prank calls from ~2004-2007. In many of them, completely different people all mention the same thing about them "tracking the pranker", clearly in an attempt to scare the ...
user avatar
0 votes
0 answers
91 views

How can you spoof you caller id but not using a voip (your carrier instead)?

My research: I found this security stackexchange post but it didn't answer my question. I know that you can do similar things using astresik with voip provider. I came up on o blog that explain that ...
user avatar
0 votes
0 answers
83 views

Is there some way to "fully delete" received and sent SMS messages (and any other "deleted" data") on my cellphone?

I have a cheap cellphone bought about ten years ago. It has a physical SIM card. I have in-phone "deleted" all sent and received messages, but very strongly suspect that these are still ...
user avatar
  • 1
0 votes
1 answer
127 views

Is there a thing as a small bag which BOTH blocks signals AND sound for securing a mobile phone on the go? [closed]

I've been hunting for this for a long time. I've been able to find "Faraday" bags that (allegedly) block signals to/from the surveillance unit (phone), but they never mention anything about ...
user avatar
  • 1
1 vote
2 answers
153 views

Is it normal/safe/justifiable that a bank asks me for my full login details (account id and PIN) when calling via mobile phone?

I am calling my bank via mobile phone (in Germany) and the electronic voice asks me to type in my account access id (via the number pad), and like-wise, type in my account PIN, all the numbers, not ...
user avatar
  • 111
12 votes
2 answers
2k views

Any plans/research for SSL-like method in telephony?

I have recently read about attacks using Caller ID spoofing technology. Criminals used it to impersonate bank or police employees and asked to install malware or transfer money to a given account. A ...
user avatar
  • 233
1 vote
1 answer
162 views

WhatsApp message from own number + 1 [closed]

I got a WhatsApp message from a number which is exactly mine but the last digit is increased by one (5 instead of 4). It was just a "Hi" and and a photo of a random guy. I asked who it is ...
user avatar
  • 111
1 vote
2 answers
228 views

Is the "trusted phone number" inside your Apple ID a security flaw?

Imagine your iPhone gets stolen or seized. Inside this iPhone is your SIM-Card. That SIM-Card is your only SIM-Card and it is enlisted as "trusted phone number" in your Apple Account. The ...
user avatar
2 votes
0 answers
118 views

My iPhone XS called someone today without my interaction

Yesterday, I was sitting at the computer and noticed that the phone is making the "calling" sound (that usual beep). I unlocked the phone and did not see any activity like I would call ...
user avatar
0 votes
2 answers
174 views

What makes this cellphone (and the weird instructions) so privacy-friendly?

I stumbled upon this weird product in a webstore primarily selling Cannabis-related products (not the actual herbs): https://smoketower.com/nyheter/Anonym-3310-mobiltelefon I've manually translated ...
user avatar
  • 1
1 vote
0 answers
127 views

Can I determine whether my phone probes base transmission station (BTS) without a SIM card?

This question is related to another inquiry on this site: Can Android phone running without SIM card be tracked (localized) by police? Accepted answer claims that: Without a SIM, your cell phone ...
user avatar
  • 172
0 votes
0 answers
381 views

How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND [bad sources]

How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND calls from disreputable (NON-'A' attestation) service providers/carriers/sources. I'm ...
user avatar
2 votes
1 answer
157 views

Can a SIM card lock be circumvented?

If so, how would one go about that, and realistically, how long would it take? Is there something we can do proactively to make this more difficult? This seems more relevant than ever since we would ...
user avatar
  • 133
3 votes
2 answers
299 views

Does replacing the SIM card mitigate any threats after a serious data breach?

I recently heard that a telephone company (a mobile network operator) was hacked and lots of data was stolen, maybe affecting up to a million customers. It sounds like the leaked data is already ...
user avatar
  • 15.3k
2 votes
2 answers
1k views

Can an android phone that is flashed to a trusted safe rom still be malicious?

I'm in the market for a new phone. The cheapest ones with decent specs are from China. Unfortunately I've read articles of phones sending data back to China for spying purposes. The phone I am looking ...
user avatar
17 votes
3 answers
3k views

Real life examples of malware propagated by SIM cards?

The laptops in use at my company have SIM card slots, which are actually used by some of our users. I am threat modeling our devices, so I was wondering if there are any realistic exploits that can be ...
user avatar
  • 173
0 votes
2 answers
2k views

Does factory resetting a phone erase spyware?

I thought that there was spyware on my phone so I did a factory reset. Would the spyware be gone or it will still exist even after a factory reset?
user avatar
3 votes
1 answer
2k views

What are the privacy implications of the "Your Phone" app on Windows?

I'm trying to decide whether or not to use the Your Phone app on Windows, and not finding much information on it. It requires a Microsoft account, but I don't really see why that should be necessary ...
user avatar
  • 2,474
0 votes
0 answers
169 views

Did fraudsters access my SMS verification code?

A very strange sequence of events resulted in some unknown person gaining access to my online banking (with CIBC). I've since recovered my account, but I am very eager to understand what happened: I ...
user avatar
  • 101
1 vote
0 answers
105 views

Retrieving a No Caller ID phone number? [closed]

I got a call from an unknown number, more specifically, a no caller ID number. I’m not the guy who gets a lot of calls from a no caller ID phone number, and usually, when I got one is typically the ...
user avatar
1 vote
0 answers
90 views

Is it reasonable to type a bank password in a phone call to the bank? [duplicate]

Recently my friend called their bank (via a normal phone call) to perform an operation with her account and she had to type her password during the call. Everything worked fine, the operation was done ...
user avatar
  • 131
3 votes
1 answer
369 views

'Removing' telecom provider from my phone

Baseband Processors have very weak overall security(closed-source firmware, no audits etc.) It also gives the telecom operator very high privileges on a mobile device. So, now I use 2 phones. First ...
user avatar
  • 275
0 votes
2 answers
402 views

Danger of making calls after unknown random number called through

I recently received a call from a number I didn't know to my mobile, answered it anyway. I didn't say anything, when it is a number I don't know I let the other person speak first.. after a few ...
user avatar
  • 562
5 votes
1 answer
1k views

Can WhatsApp, Signal or Telegram be hacked through a SIM SWAP attack?

In Cuba the telecoms/ISP monopoly, Etecsa, works with the political police to spy on dissidents, journalists and others. A common attack in Cuba is therefore SIM Swapping which is easy for them. It is ...
user avatar
  • 51
-2 votes
3 answers
186 views

Calling from mobile phone without using the cellular network

This has been in the news: https://www.wired.com/story/fcc-fines-wireless-companies-selling-users-location-data/ Is there a way to make calls without using cell towers? Also in this context: is it ...
user avatar
2 votes
1 answer
196 views

Is phone number verifications with SMS magic HTTP links less secure than OTP?

I want to verify phone number ownership with specially crafted and encrypted payload within an HTTP hyperlink callback through SMS as opposed to sending an SMS OTP code and writing it back in server ...
user avatar
  • 23
4 votes
1 answer
229 views

How does a company check the password received from your phone keypad during a call? [duplicate]

I had to call customer service recently regarding my 401(k) and robo call in the beginning asked me to enter my social security number using the keypad followed by a # and then asked for my account ...
user avatar
  • 41
2 votes
1 answer
1k views

Is inputting credit card numbers over a mobile phone secure?

I'm in the UK. In order to top up a pay-as-you-go SIM card, I had to first ring the mobile network to associate my bank card with the SIM before asking them to credit £10 to it (future top-ups don't ...
user avatar
30 votes
6 answers
6k views

Is revealing the phone number during OTP verification process considered a vulnerability?

One of the common way of implementing 2FA is using phone number Text message or Call with OTP. As I can see, usually web services show something like: OTP was sent to the number +*********34 Is it ...
user avatar
38 votes
8 answers
8k views

Why does my digital bank need my phone date and hour to be correct?

I'm not from Information Security or any IT related area. But I want to know if there is any security reason for my digital bank to demand my phone to be on "Automatic Date & Time"? For ...
user avatar
  • 493
0 votes
1 answer
1k views

What is "Your Phone" in Windows 10 Advanced Firewall?

I have an Outbound Rule in my firewall called "Your Phone". Settings: All programs. In Customize Application Package Settings, it has "Apply to app package..." set with a long ...
user avatar
  • 41
1 vote
3 answers
7k views

Is it possible to track someone using their mobile number in the UK?

This is something I've wondered for a while - is it theoretically possible to track someone using their phone number in the UK? It's a classic Hollywood trope and I'm wondering just how much truth ...
user avatar
1 vote
1 answer
193 views

Recycled phone numbers [closed]

I just wanted to ask because I am in a situation now, where I have been locked out of my Instagram due to my mobile phone provider deactivating my Simcard. I have contacted Instagram support sending ...
user avatar
7 votes
4 answers
1k views

Why do people use "burner phones" rather than Signal or similar solutions?

Why do people use burner phones rather than Signal or similar? I would imagine that if you are high value target the police or intelligence service would simply eavesdrop every phone call passing the ...
user avatar
  • 171
0 votes
0 answers
98 views

Possible data leakage and traceability regarding mobile personal hotspots

The question Say, one may use a mobile phone's personal hotspot functionality to broadcast a message locally via the ESSID, like "Happy Birthday Lilian" or "Stand with Hong Kong". Assuming such ...
user avatar
0 votes
0 answers
87 views

How can you check if a phone number was recently moved? (To mitigate SIM swapping)

I know never to use phone number as a sole or backup authentication factor. But if a customer forgets their password, and I want to use information they know about their account alongside access to ...
user avatar
-1 votes
1 answer
130 views

Can your phone get hacked just through your phone number? [closed]

If someone has got your phone number can they hack into your phone using just the phone number? Perhaps by sending an SMS?
user avatar
1 vote
2 answers
154 views

Call center recording my credit card info

I just made a new contract over the phone with my mobile phone provider and I needed to pay the activation fee. The lady told me that they could accept only credit cards and asked me for the full ...
user avatar
4 votes
1 answer
410 views

Why can't spoofed caller ID's be identified?

There are several posts here about how easy it is to spoof caller ID and that there is no way to detect it. I did find one post suggesting the calls to 1-800 numbers could not be spoofed. being ...
user avatar
-1 votes
1 answer
125 views

Are the locations text messages are sent from logged?

When you send a text message from a phone with a sim card, is there a log which records your location at the moment, or any other information? is it linked to the phone? to the sim card? to both?
user avatar
  • 11

1
2 3 4 5
8