| Author |
Canary sings, "I can read your texts" |
insyder
Joined: Dec 17, 2002
Posts: 147
PM, WWW
|
for those who dont read mobile-review.com:
Friday 28 February 2003
Canary sings, "I can read your texts" [ 14:24 ]
Author: Edward Ermakov Source: http://www.theinquirer.net Translation by:
A LITTLE BIRD working for one of the major British GSM operators has revealed to us just how insecure the whole text/SMS messaging service really is. In order to offer SMS (Short Message Service) - otherwise known as texting - operators install an SMSC (Short Message Service Centre). Many of these SMSCs come from software specialists such as LogicaCMG or Schlumberger SEMA.In essence, an SMSC is like a giant store-and-forward email server.
Our canary maintains that the typical time a text message stays stored on the SMSC is around 15 days. Worryingly our bird says that text messages can actually be viewed by ANY customer services advisor. " Theres no password or permissions or anything," the canary adds. "Many advisors amuse themselves on slow days by picking numbers at random and reading the messages, and then following the trail to the sender and jumping from person to person like this. Its also possible to spoof text messages through the [SMSC], and make them look like theyve come from anywhere or anyone, just like with email."
More to the point if a member of the public does want to take some sort of action regarding a nuisance SMS, the operator does genuinely possess the ability to interrogate the SMSC and discover all the requisite information. Most operators wont actually admit this to the public, as it could easily generate masses of customer complaints which would be unprofitable to pursue. The good news, however, is that if you ask the customer services department of your mobile phone company very nicely indeed, they will reveal the number for a nuisance calls bureau which can investigate SMS complaints too. So now you know.
| |
|
Andy.
Joined: Apr 27, 2002
Posts: > 500
PM |
I presumed that sms centres would have to comply with the data protection act 2000. or does the act not apply to them?
This message was posted from a P800 |
Eleventy7
Joined: Jul 05, 2002
Posts: > 500
From: the rotten oasis
PM, WWW
|
bloody hope they do have to comply!
|
mkt
Joined: Dec 11, 2002
Posts: > 500
From: Poland
PM |
In Poland there was case of divorce because of that- lady suspeceted, that her man had an affair. She tricked a guy at customer service and he gave her husband's smses. She was right, they got divorced but customer service employee got prosecuted.
[addsig] | |
|
Access the forum with a mobile phone via esato.mobi
|
Posted: 2003-03-01 00:19
