Wednesday, February 23, 2005
More T-Mobile Network Insecurity - Protect Yourself!
Posted by Ed Hansberry in "NEWS" @ 08:48 PM
http://www.gizmodo.com/gadgets/cellphones/exclusive-tmobile-voice-mail-compromised-how-to-protect-yourself-033996.php
"It’s very strange to listen to an MP3 recording of your own voice mail. When John Hering of security firm Flexilis told me that they had reversed engineered the exploit that compromised Paris Hilton and Vin Diesel’s T-Mobile voice mail earlier this week, I wanted to see it for myself. I asked John to pop open my voicemail and send me a recording. I called myself with a neighbor’s land line, left myself a voice message, and then gave John my phone number. Twenty minutes later I not only had a recording of that voice mail in my email inbox, but had received two calls—from myself. We had been able to access my voicemail, sure, but had also used the system to make an outgoing call. In effect, my voicemail called me. In reality, John stood at a payphone in a cheap Mexican restaurant in downtown Los Angeles. He could have been anywhere."
8O Scary to say the least. Steps are included to protect yourself, so if you have a T-Mobile account you should head to the Gizmodo link and take the recommended steps. And T-Mobile should get their act together. :evil:
Update: Apparently not all T-Mobile users are on the same voice mail system, so the solution presented may not be available. That also means it is possible not all users are at risk.
"It’s very strange to listen to an MP3 recording of your own voice mail. When John Hering of security firm Flexilis told me that they had reversed engineered the exploit that compromised Paris Hilton and Vin Diesel’s T-Mobile voice mail earlier this week, I wanted to see it for myself. I asked John to pop open my voicemail and send me a recording. I called myself with a neighbor’s land line, left myself a voice message, and then gave John my phone number. Twenty minutes later I not only had a recording of that voice mail in my email inbox, but had received two calls—from myself. We had been able to access my voicemail, sure, but had also used the system to make an outgoing call. In effect, my voicemail called me. In reality, John stood at a payphone in a cheap Mexican restaurant in downtown Los Angeles. He could have been anywhere."8O Scary to say the least. Steps are included to protect yourself, so if you have a T-Mobile account you should head to the Gizmodo link and take the recommended steps. And T-Mobile should get their act together. :evil:
Update: Apparently not all T-Mobile users are on the same voice mail system, so the solution presented may not be available. That also means it is possible not all users are at risk.
