Windows Phone Thoughts - Daily News, Views, Rants and Raves

Check out the hottest Windows Mobile devices at our Expansys store!


Digital Home Thoughts

Loading feed...

Laptop Thoughts

Loading feed...

Android Thoughts

Loading feed...




Go Back   Thoughts Media Forums > WINDOWS PHONE THOUGHTS > Windows Phone News

Reply
 
Thread Tools Display Modes
  #1  
Old 08-05-2009, 09:30 AM
Ed Hansberry
Contributing Editor Emeritus
Ed Hansberry's Avatar
Join Date: Aug 2006
Posts: 8,228
Default SMS Vulnerability For GSM Phones

http://arstechnica.com/apple/news/2...coming-soon.ars

"Demonstrations at the Black Hat computer security conference revealed that smartphones based on iPhone OS, Android, and Windows Mobile are indeed vulnerable to hacking via SMS messages. Those aren't the only phones that are vulnerable, though, and security experts are working with mobile carriers and handset vendors to patch the problem."

It looks like a general security breach in how almost all phones handle SMS. I'll be curious to see what patch is necessary and how far back Microsoft and their partners will go to fix the problem. My guess is, WinMo 5 devices won't get any on-device fix. We'll see. Because it involves the way SMS messages are crafted, it is possible the network could be modified to detect and trap the messages rather than allowing them to make it to your phone.

__________________
text sig
 
Reply With Quote
  #2  
Old 08-05-2009, 11:00 AM
TOCA
Intellectual
Join Date: Aug 2006
Posts: 175

Yet an other Proof of Concept, but how serious is this, how deep can they hack it, and how scarred do we need to make the general public.

Can it be hacked into an expensive paperweight, or does it give the hacker the full controll and/or full access to the content, or are they "only" able to leave stupid messages on the display?

Do the hacker need some special equipment, or is it doable from any PC or even handheld devices?
 
Reply With Quote
  #3  
Old 08-05-2009, 06:12 PM
BevHoward
Intellectual
Join Date: Mar 2002
Posts: 171

The registry dwords under the key HKLM\Security\Policies\Policies noted in the article at http://www.silentservices.de/adv01-2008.html don't exist in the (old) PDA2k

Anyone know if they should be added or is the general lack of entries in the key a factor?

Beverly Howard
__________________
Beverly Howard
http://www.BevHoward.com
 
Reply With Quote
  #4  
Old 08-06-2009, 10:57 AM
T_Scheen
Pupil
Join Date: Jun 2002
Posts: 21

Well, the registry entries on my FSC Loox T830 (WM5.0) were set unsafe.
I directly corrected them according to the article. Many thanks for the tip !!
 
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +1. The time now is 07:30 PM.