Category Archive

A presentation and paper on Reverse engineering JTAG at the 26th Chaos Communication Congress is now available to download here:

http://events.ccc.de/congress/2009/Fahrplan/track/Hacking/3670.en.html

Other Hacking and reverse engineering papers and talks from the conference can be found here:

http://events.ccc.de/congress/2009/Fahrplan/index.en.html

The hacking track is here:

http://events.ccc.de/congress/2009/Fahrplan/track/Hacking/index.en.html

Hackers claim to have stolen all T-Mobile US’s corporate data, customer accounts and network infrastructure. More information from the Register can be found below:

http://www.theregister.co.uk/2009/06/08/tmobile_us_loss/

Three individuals who allegedly hacked into telephone systems in the United States and abroad and sold information about the compromised telephone systems to Pakistani nationals residing in Italy. Italian law enforcement arrested the financiers of the hacking activity. Those financiers allegedly used the information to transmit over 12 million minutes of telephone calls valued at more than $55 million over the hacked networks of victim corporations in the United States alone. Read more below:
http://www.net-security.org/secworld.php?id=7645

Here is an article about the security of the newly released iPhone 3.0 software for both iPhone 3G and iPhone 3G S:
http://www.net-security.org/secworld.php?id=7647

The research team, which included Edith Cowan University of Australia and BT, revealed some early results yesterday in news reports by the BBC and British television affiliates.

To read more about the research go here:
http://news.bbc.co.uk/2/hi/uk_news/wales/8036324.stm
and here:
http://www.darkreading.com/security/storage/showArticle.jhtml?articleID=217400054&cid=nl_DR_DAILY_H

The video talks about a couple of people who’s lives are ruled by harrasing calls and threats. They claim that their phones are tapped with special software.

Rick Mislan talks about the software and how easy it is to be placed on mobile phones.

Software such as:

• http://www.mobile-spy.com/
• http://www.world-tracker.com/
• http://www.flexispy.com/
• http://www.e-stealth.com/
• http://www.fonefunshop.co.uk/spyphone/
• http://www.thespyphone.com/allinone.html

Link to Video on YouTube:
http://www.youtube.com/watch?v=uCyKcoDaofg

It is persumed that the phones can be modified and used in receiving SMS verification codes sent from banks:

criminals have already collected thousands of login details for online bank accounts in countries such as Germany and Holland where banks send a transaction authentication number (TAN) code by SMS to a person’s mobile phone in order to complete transactions.

Read the original post byUltraScan here:
http://www.ultrascan.nl/html/press_room.html#25.000%20Euro%20for%20your%208%20years%20old%20Nokia%201100

Read more about it here:
http://www.arabianbusiness.com/553344-hackers-pay-top-dollar-for-old-nokia-1100-handsets

and here:
http://www.dialaphone.co.uk/blog/?p=2922

Having downloaded the latest beta of the iPhone yesterday (seen above), I started using it today and when a friend of mine asked to use it to dial a phone number, all they saw was this:

I restarted the phone and I got the proper dial screen shown below.

This happened to me again today… So I decided to post it on the inter web

It might not be because they are secure, but simply because the ROI is just a mere phone handset! Add to that the device, OS, and carrier variations.

Read more here:
http://mobile.slashdot.org/article.pl?sid=09/03/25/1238246&from=rss
and here:
http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=Mobile+and+Wireless&articleId=9130346&taxonomyId=15&pageNumber=1

Chris Ogle (29) from Whangerei, New Zealand has stumbled across the sensitive military details of U.S. military personnel after purchasing a secondhand MP3 player in Oklahoma, USA. He discovered around 60 sensitive military files dating from 2005 on the used music player. The files were clearly marked as ’secret’ and contained the phone numbers of numerous soldiers serving in Afghanistan and Iraq.

For more on the story visit:

http://www.thetechherald.com/article.php/200905/2852/Man-finds-U-S-military-secrets-on-secondhand-MP3-player

I don’t know if this is true or not yet but here it goes! There seems to be a vulnerability that affects Nokia Series 60 phones, including N95 and N73 handsets that blocks all SMS and MMS from reaching the phone, hense the name “Curse of Silence”. attacker in this case sends a specially designed SMS message to the target phone. What’s worrying is that the recipient will receive no indication that they got the message.

The only way to get the target phone to recieve messages again is to factory reset it. Even after the factory recet, the phone still remains vulnerable to future silent curses. The attack will only work on phones running version 2.6, 2.8, 3.0 or 3.1 of Symbian S60.

Source: http://www.dialaphone.co.uk/blog/?p=2505

Watch in on Fora.tv to see the whole transcript as in the Pouge video in the previous post.

A video file by ZiPhone Maker crashes the iPhone:
Forbes.com