android security and govt. cell access - General Topics

so apparently:
"Law enforcement and intelligence services in the U.K. and the United States possess technology to remotely activate the microphones in cell phones, by accessing the phone's diagnostic/maintenance features, in order to listen to conversations that take place nearby the person who holds the phone."
how is this possible in android? (though i suspect it's at a firmware level, not android level)

Probably true but not so if you have a custom rom....

oka1 said:
Probably true but not so if you have a custom rom....
Click to expand...
Click to collapse
i wouldn't bet on it. if you can initiate calls with the carrier, i'm willing to bet - if activated on their end - they can initiate calls manually.

Although agencies like the NSA have reportedly had these capabilities, even on Landlines, for decades i bet with all the new anti-terror legislation that they can do it now without a hint of illegallity. (Whereas once upon a time they would have needed a court order).
"They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety".
Edit: If any of the security service wish to open the mic on my phone they are welcome to do so. All they will hear though is the sound of last nights curry having an unpleasant effect on my digestive system!

Related

Big Brother watching you via your phone

This is what I found on a local papers. My God, Big Brother watching you via your phone
IBM revealed in its Next Five In Five study that one of the biggest innovations that will change our lives in the next five years is mobile phones that can read our minds.
The study said that advanced "presence" technology, which IBM is testing with Norway's biggest telecommunications group, will allow mobile devices and networks to learn about users' whereabouts and preferences as they commute, work and travel.
Click to expand...
Click to collapse
i would not put much trust it that source
when
1 they dont name the norwegian isp
2 norway have pretty strict privicy laws
What exactly is new about this?
At least in the US (I think in other places too by now) all mobile phones are required to have a GPS chip by law so they can be tracked in case of emergency or "criminal situation".
Believe me, if big brother wanted to watch you, they would not advertise the technology. I think this is more of a "phishing trip" (thats phishing whit "ph" as in internet scam) so cell companies can shove targeted commercials up your @@@ and make more money.
Rudegar said:
i would not put much trust it that source
when
1 they dont name the norwegian isp
2 norway have pretty strict privicy laws
Click to expand...
Click to collapse
They say Norwegian telecoms group, not isp. That would probably indicate Nokia...
also
Privacy is one thing, but "features for customer benefit" are another... remember what was said when people wanted to put CCTV in city centres? These days you just kinda accept that they will be under constant scrutiny...
not exactly the same, but it would be the "customer benefit" that eventualy outwieghs the more sinister uses for the technology.
Already some of us are using MSN live search, or Google Maps and seeing the advantages that brings... as soon as the more widespread acceptance of these new uses is apparent people will let it slip to the backs of their minds that the evil people in the shadows could use this information to great effect for anything they wanted....
When im rich, im buying an island and building a huge farraday cage around it so they cant read my brain with microwaves and lasers. heeheh
nokia is from finland not norway
no mobil producers i know of are based in norway
a norwegian telcom company is telenor though that could be a player i doubt it though it's not really atune with the nordic system to test out a big brother system least of all in norway
and normal mobils dont! have gps's in them but they connect to antennas and the antennas know who are connected to them and from what direction they are connected from thats all
if the operater let people this can be used as a pretty crude form of gps but it's prob closer to a 1km pricision then a 1m or what ever gps is today
Hmm, I distinctly remember reading something about GPS1 even in normal phones but i could be wrong.
Just wanted to make a point that if they want to find you they will, though making this point is hard to do without sounding paranoid.
P.S. Not too relevant, but I am fairly sure (don't have a link to prove it) that commercial GPS (like those in PPCs) are accurate to about 10 meters and the nav software compensates by assuming you are in a car on a given street.
There is a something called DGPS (differential) that is accurate to less then one meter but it relies on ground stations in addition to satellites and is only available in certain areas.
we are traceable as is via our phones and there are no such things as private calls
9yrs in the militray and 11 in the gov security uk/overseas
trace over phone ... do you know "gsm cell id" ... in the future, all provider in austria must store "cell ids" and connection data for 6 months. the first steps to build a visible user are done!
in the uk people have already been located in court case for serious crimes ,using the monbilephone to give times and locations within feet

Theft alarm

Does any one know of a theft alarm that will give a warning when my mobile is away from the receiver (in my pocket) more than a certain distance? Maybe built on RFID technology or blue tooth?
Your question made me imagine a phone tied by a piece of string to one of your pockets, so if someone jerks it out without you noticing, it would also jerk your pants. lol
that would be the simplest solution; still, I prefer technology, a very tiny transmitter hidden in the mobile, preferably a passive RFID tag so it will not contain a battery which then will be paired to a receiver that can only detect this tag. If the mobile is out of range, a buzzer and vibrating alarm is activated in the receiver.
I know that this seems possible, however, current RFID readers are priced in Ks of $, and this will not make it feasible for every one to buy it.
There are some alarms in the market with the same idea but built on different technology, their problem is that the transmitter is noticeable and the thief can simply remove them the moment he picks the mobile.
http://www.tradekey.com/selloffer_view/id/887081.htm
ok so you are running late for work and forget to put the non mobile side of the detector on your person one morning, you get part of the way out the door up the street and your phone starts buzzing and beeping like crazy.... run back to pick up the chip???
yeah if you really want this that bad string sounds good.
cktlcmd said:
Your question made me imagine a phone tied by a piece of string to one of your pockets, so if someone jerks it out without you noticing, it would also jerk your pants. lol
Click to expand...
Click to collapse
Also, if the phone slip of your hand, the string will prevent it from drop to the floor. Not a bad idea, expecially you get two protections for the price of one.
If you carved some gooves into the side of the phone you could make a yoyo too.
come on guys, where I live, 3 out of 5 mobile owners had their mobiles theft at least once, if we use the string alarm, I imagine every one walking down the street is screaming out of pain because a thief tried to steal his mobile and had to let go when he found it stringed, this sudden release hearts I think
phones are considered disposable technology these days, i remember a few years back when insurance companies in australia use to offer insurance on phone theft but no one really bothered with it much.
if someone wants my phone badly enough to try and take it from my pocket i garentee there will be some sort of weapon involved and they will want my wallet and keys too and that being the case they can have it.
also considering that most people are aware that a phone can be tracked via the cell network who would buy it? its not like you will pay $50 down the pub for it knowing that someone would have reported it stolen and ur average thief aint smart enough to know how to change the IMEI number nor would anyone who is stupid enough to buy a $50 phone at a pub with half a string attached to it (LMAO)
st3v3 said:
phones are considered disposable technology these days, i remember a few years back when insurance companies in australia use to offer insurance on phone theft but no one really bothered with it much.
if someone wants my phone badly enough to try and take it from my pocket i garentee there will be some sort of weapon involved and they will want my wallet and keys too and that being the case they can have it.
also considering that most people are aware that a phone can be tracked via the cell network who would buy it? its not like you will pay $50 down the pub for it knowing that someone would have reported it stolen and ur average thief aint smart enough to know how to change the IMEI number nor would anyone who is stupid enough to buy a $50 phone at a pub with half a string attached to it (LMAO)
Click to expand...
Click to collapse
Obviously you have not been on any poor parts of the world, based on your opinion. But in reality, there are parts of the world where cell phones don't have insurance, and they do sell it on the nearby pub, and people actually will buy them believe it or not. Just my observation.
---
where I live, it is exactly as what cktlcmd described, a phone may cost the salary of several months to some people, police can not track all of them and they get stolen only when you loose your attention for one moment (it takes less than 30 seconds of not paying attention to loose your mobile as per statistics), so may be a theft alarm does not sound feasible where st3v3 lives, but here, it sure is. Besides, loosing the data and having someone looking at your personal data is what hearts more.
hatamata said:
where I live, it is exactly as what cktlcmd described, a phone may cost the salary of several months to some people, police can not track all of them and they get stolen only when you loose your attention for one moment (it takes less than 30 seconds of not paying attention to loose your mobile as per statistics), so may be a theft alarm does not sound feasible where st3v3 lives, but here, it sure is. Besides, loosing the data and having someone looking at your personal data is what hearts more.
Click to expand...
Click to collapse
point taken but having the phone vibrate and beep still isnt going to act as much of a deterant, a running thief will just keep running!
hatamata said:
Besides, loosing the data and having someone looking at your personal data is what hearts more.
Click to expand...
Click to collapse
Backup frequently (automatically - see my Backup Bible at http://www.pocketpcmag.com/blogs/index.php?blog=3&p=1270&more=1&c=1&tb=1&pb=1 ) and use a Secure Information Manager. The four best are:
CodeWallet Pro (Developer One, Inc., www.developerone.com)
eWallet Professional (Ilium Software, www.iliumsoft.com)
FlexWallet (WebIS, Inc., www.webis.net)
Spb Wallet (Spb Software House, www.spbsoftwarehouse.com)
st3v3 said:
point taken but having the phone vibrate and beep still isnt going to act as much of a deterant, a running thief will just keep running!
Click to expand...
Click to collapse
Not the phone that will vibrate, it is the receiver which should be in my pocket
As for Menneisyys's back up idea, it sure will save most data but not all of it, still, it will not prevent others from seeing my sensitive data stored on the phone.
hatamata said:
where I live, it is exactly as what cktlcmd described, a phone may cost the salary of several months to some people, police can not track all of them and they get stolen only when you loose your attention for one moment (it takes less than 30 seconds of not paying attention to loose your mobile as per statistics)...
Click to expand...
Click to collapse
I know that there are countries where a phone cost a few months of salary.. but I'm pretty sure that in those countries, there are always cheaper alternatives. E.g. India's gazillion-aire may buy an A380 as private jet.. build a tower as his own house.. but they do have pretty cheap cars (as I heard, £1,000+). Hence, I don't really understand when people are willing to spend several month of salary on a phone. If that's the case, then probably that's a risk they have to take. E.g., you don't get a convertible car in China unless you are prepared to hire body guards.
AND, if that phone is going to cost the person buying the phone x months of salary, I would think it would cost y (where y > x) months of salary for the person who is stealing it, and some beeping gadgets will not do the job. The beeping gadget will probably make a `theft` to a `robbery`, I think.
Anyway, cute beeping gadget .
hatamata said:
Not the phone that will vibrate, it is the receiver which should be in my pocket
As for Menneisyys's back up idea, it sure will save most data but not all of it, still, it will not prevent others from seeing my sensitive data stored on the phone.
Click to expand...
Click to collapse
You can encrypt everything on, say, your card in the background - WM6 already supports this. Also, there already are Remote Wipe solutions.

Drone that Hacks T-Mobile and ATT Devices

Not a single regulation violated, pretty cool if you ask me:
Built by Mike Tassey and Richard Perkins, the Wireless Aerial Surveillance Platform (otherwise known as the WASP) is a flying drone that has a 6-foot wingspan, a 6-foot length and weighs in at 14 pounds. The small form factor of the unmanned aerial vehicle allows it to drop under radar and is often mistaken for a large bird. It was built from an Army target drone and converted to run on electric batteries rather than gasoline. It can also be loaded with GPS information and fly a predetermined course without need for an operator. Taking off and landing have to be done manually with the help of a mounted HD camera. However, the most interesting aspect of the drone is that it can crack Wi-Fi networks and GSM networks as well as collect the data from them.
It can accomplish this feat with a Linux computer on-board that’s no bigger than a deck of cards. The computer accesses 32GB of storage to house all that stolen data. It uses a variety of networking hacking tools including the BackTrack toolset as well as a 340 million word dictionary to guess passwords. In order to access cell phone data, the WASP impersonates AT&T and T-Mobile cell phone towers and fools phones into connecting to one of the eleven antenna on-board. The drone can then record conversations to the storage card and avoids dropping the call due to the 4G T-mobile card routing communications through VOIP.
Amazingly, this was accomplished with breaking a single FCC regulation. The drone relies on the frequency band used for Ham radios to operate. Not wanting to get into legal trouble with AT&T and T-Mobile, they tested the technology in isolated areas to avoid recording phone conversations other than their own. The duo play to discuss how to build the WASP at the DEFCON 19 hacking conference.
http://news.yahoo.com/men-build-small-flying-spy-drone-cracks-wi-172803720.html
Let it hack my g2x, my phoe will probably knock it down when it reboots, or gps will take so long to lock up the drone will run out of juice.
That thing is a felony arrest waiting to happen.
G2X CM7
Wow. I'm more frightened of the gov't using it than hackers. Pretty incredible innovation, though. Thx for the link!
Also, I think it'd be nice to have one thread that doesn't have a bitter G2X user segue any topic into how much they hate their phone. FFS!!
Nice! I want one!
Sent from my LG-P999 using XDA App
Probably not breaking any laws as long as they are given permission to record the conversations (which are their own so far).
I have a swiper drone at work for testing our surveillance equipment. Never really thought about this application though.
Thanks for posting an interesting story. I rarely even open the general forums these days because it seems like every thread is "hate my phone," "should i trade," or "gb update brick." Nice change of scenery.
1984 Big brother comming our way

[Demonstration] Give freedom to my phone !

Sorry, my english short. Obtain a understanding.
I think, nowadays, Many people couldn’t recognize that we were losting our ownership from the smart phone appeared.
There are nobody wonder why the companies restrict freedom of rooting and nobody pusuit his ownership with expensive payment.
These days, we treat the smart phone as a computer "in my hand". it’s different from the stupid phone.
The dream of “In my hand computer” has achived with smart phone technology that we had tried to achive it.
However, until now, I have controled my paid computer(desktop or laptop) freely.
I am responsible for my computer whether I use well or break it. because it’s mine.
I can controlled everything about my computer with my intention.
However, why “In my hand computer” that I paid and belonged to me is restricted like another man’s thing?
It’s my right whether I root or jailbrake my phones. Because it’s mine. why we are restricted our right by the companies?
Can’t you control your own PC by “Administrator rights”?
Is your PC restricted for specific company?
If we rooted our phone, we have to pay the A/S cost. because we are responsible for our fault.
However, The companies doesn’t allow more rooting anymore. Furthermore, The companies tring to eliminate the rooting.
Why don’t we take a action? Why we just say sad?
Don’t we have to regain our ownership?
I think it doesn’t make a sense.
In my opinion, we have to pursuit our ownership from now on.
Everyone was deceived by the companies. and accept all.
I think foreigner isn’t different from local.
I want to demonstrate against the companies. Why am I restricted by manufacturing firms and communication Companies?
I don’t want to do like this if I got my phone at no cost. I can not understand why I am restricted to paying expensive cost.
I paid to manufacturing firm to buy cellphone. and I paid to communication Company to use it.
A person who paying all is me. However I feel that my phone is not my phone.
What about you?
P.S) Sorry about broken English.

Business Security: A Top Priority

One of your top priorities at your company should be your data security. No matter what you do in your line of business, there will always be people out there trying to steal information, especially if you are storing client data they can use to their advantage. You may not even realize that you could penalized if you aren’t protecting customer information as actively as the government thinks you should, so there is even more reason to ensure your security is managed properly. Fortunately, you can use a managed IT security service to take care of it for you.
Wendy’s learning the hard way
Wendy’s recently opened an investigation into a potential security threat and has hired a security firm to look into the issues to determine the problem and how to fix it. Apparently, there were cards used legitimately at Wendy’s and then later used for fraudulent charges elsewhere, according to NBC News. Wendy’s is unsure of what exactly happened and is hoping for a quick investigation, so the problem can be resolved. Rather than being reactive in situations like this, it is much better if you are proactive and protect from loss of private data in the first place.
Similar thefts have been happening at many major corporations, including a high profile one at Target and one at Home Depot. It seems that many companies that think they are protected end up being less protected than they think when it comes down to it and they have to prove themselves. Don’t be like the other guys. Set yourself apart by getting your security taken care of right now.
Staying above the law
When it comes to protecting consumer information, the government is very strict, especially when it comes to the healthcare and banking industry. It is your responsibility to know the laws associated with your industry and ensure all your information is being stored and processed as it should be, which is one way a managed IT security service can help you.
Get your business security on track
If you need to get your business security on track, the best way to go is to work with a managed IT security service. This kind of service can come in, survey your current system, look for any holes, and work with you to determine the best security possible for your line of work. This will include discussions about legalities when securing customer information as well as finding any kind of current holes in the system. A managed IT security service is a top priority and will be proactive to prevent little things from falling through the cracks that you never expected.
IT news brought to you by intrinium.com
Source: nbcnews.com/business/business-news/wendy-s-looks-possible-security-breach-after-credit-card-fraud-n505231
Great Post
Business security is extremely crucial. With emergence of BYOD and mobile apps, it is a challenge for developers to continuously provide extremely secured platform to protect sensible information.
Look at security measures that you cannot ignore:<mod snip>

Categories

Resources