IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [sms]

Short message (or messaging) service, a system that enables cellular phone users to send and receive text messages.

234 questions
5
votes
2 answers

SMS Verification Code vs. Response Message

I need to verify each user's phone number in an enterprise SaaS system. Instead of using the common "Enter the 4/8 digit code in this form", I'd prefer to have the user respond with an SMS message saying "hello" or possibly a unique message for each…
Dom Ramirez
  • 153
  • 4
3
votes
2 answers

Trace source and destination of an SMS message

Is it possible to trace the source or destination (location, even coordinates) of an SMS message ? If it is, is it possible to do it even if the phone is roaming in a different country ?
Unbekkant
  • 33
  • 1
  • 1
  • 4
3
votes
1 answer

Identify suspicious flood of SMS (phone exploit?)

edit Based on comments and answers, there seems to be some misconception. Allow me to clarify: I have of course searched for REG-RESP on Google prior to writing this question, but what is to be found is not helpful, or from what I can tell, even…
Damon
  • 5,211
  • 1
  • 21
  • 26
1
vote
0 answers

A message sent to your phone to erase another message

After giving a new credit card to a client some banks send its PIN code with an SMS. Later they send another SMS that's only purpose is to erase the SMS with the PIN from user's phone. Does this trick work via Replace Short Message Type code and how…
lim-lim
  • 29
  • 1
  • 4
1
vote
1 answer

How to decrease the fraud level on SMS verification

To prevent fraud, we require the users to link their account to a mobile phone number. We send a code by SMS. Fraudsters use hacked social networks to convince "friends" to send them the code they will receive. Even if the message clearly say not to…
Toto
  • 193
  • 8
1
vote
1 answer

How secure it is to identify a user by an sms's caller id?

I need to verify a user based on its phone number. I am thinking that instead of me sending him an sms, it would be cheaper if he sends me the sms and I verify he's phone number based on his caller ID. Is it trustable? Or can it be faked?
awavi
  • 113
  • 3
1
vote
4 answers

Is a SIM card secure against governments?

Let's say I live in Russia and I use Gmail. My Gmail has my phone number for recovery in case I lost my Gmail password. Obviously if Russian police want to access my Gmail account then they can produce a SIM card for my name and receive the reset…
ilhan
  • 415
  • 2
  • 4
  • 10
1
vote
0 answers

Can someone trace the source of a text msg without a phone number, only a four digit code instead?

I am receiving phishing texts from someone claiming to be from Chase Bank. There is no return phone number at the top, only a four digit number instead. The police tell me that this text (which obviously has the date and time) cannot be traced…
Tuesday Afternoon
  • 11
  • 1
0
votes
1 answer

Send a form with sensitive information via SMS attachment

A prospective business associate wants me to send an image of an application with some of my important self-identifying information via SMS as an attachment, e.g. image or PDF of the form. This doesn't sound secure to me. I have no reason to believe…
shea
  • 103
  • 2
0
votes
0 answers

Mysteriously encoded SMSs from Ethiopia. Is it sinister?

Thought i'd try my luck here as i've not yielded any results in my Googling. I have received numerous SMSs from +251 (Ethiopia) that look like the following. I'm not sure if its a strangely encoded language, or some type of exploit. It's being sent…
Max
  • 151
  • 3
-1
votes
1 answer

Spoofing SMS messages

I received a message recently on a droid phone that appeared to have originated from an Iphone in my contact list. I was able to look at the Iphone from which the message appeared to have originated and it showed the exact same message as having…
Gerald
  • 11
-1
votes
2 answers

How to secure SMS functionlity in web application?

How to secure SMS sending feature in web applications? If an application is using third party SMS gateway then SMS also can be spoofed. Like attacker can change mobile number with firebug and abuse SMS gateway to send spoof SMS like phishing message…
Know Your Enemy
  • 1
  • 2