Login

Membership has its privileges. Choose a username and provide a working email - that's all it takes to join. Click below to make a new account.

Make a new account

Username:
Password:

Related Links

+
+ Also by Sanjay Sharma
QBTPL Projects
NEWS
TECH NEWS
FREE STUFF
BLOGGING
PROJECTS

Possible That SMS Received Is Not From The Number Displayed; In Future SMS-Spoofing May Increase


By Sanjay Sharma, Section Tech News
Posted on Sat Dec 11, 2004 at 12:01:11 PM EST

Gurgaon Scoop.com - SMS Spoofing
You have had junk mail from people who are not who they say they are. Get ready for SMS from people who are not who they say they are, and nor is the displayed number the one that is actually sending it.

It is now possible for people to send SMS and hide the true number from which they are sending it, or even display another number from which is was not really sent. The internet's capability to allow people to send SMS' has made this even easier. "SMS spoofing became possible after many cellular operators integrated their network communications with the Internet," according to Denis Pankratov and Dmitri Kramarenko of the Ukraine-based Computer Crime Research Centre (CCRC).

SMSes are only as trustworthy as e-mails. But unlike the latter, where the header holds clinching evidence about the source computer, it's impossible to trace the genesis of an SMS that carries only numbers. To boot, SMS is highly suited to bulk application like e-mail. Spoofers either set up personal SMS servers or use others' for a fee. These messaging centres can't be pinned down either. "SMS technology inherently supports spoofing," reveals Nayak. "All one needs is an application designed for that." So it's only a matter of time before tricksters latch on to the web-based, third-party SMS spoofing software products like

  • Clickatell,
  • Lotus Domino or
  • SMSspoof, readily available on the net.

    "Any person can purchase or download evaluation copy to commit a crime," say the CCRC experts.

(Click on "Full Story" for more.)

According to Supreme Court advocate Paavan Duggal, these messages are sent through websites based in countries other than India and locating their administrators is a daunting challenge. Most websites carry only an e-mail address in the name of contact details. Mobile service providers let messages through without authenticating the senders, a task made increasingly difficult by swelling SMS volumes. "SMS messages aren't stored by the mobile telephony service provider, making it impossible to ascertain their origin," says Duggal. While there could be remote hope for messages staying within one SMSC (Short Message Service Centre) or operator, roaming capabilities rob the operators of opportunities to filter messages. Sophisticated features open up ever-greater holes.

  • Corporate India is increasingly lapping up mobile phones, PDAs, wireless intranet connectivity, and customised SMS-based ERP-enabling (software to support and automate business processes). And there's no reason why spoofers won't evolve along with the advent of mobile image messaging or mms to find ways to abuse the new technology.
  • But CCRC experts say "there's no silver bullet solution yet."
From Outlook India - December 09, 2004 - by HARSH KABRA
http://www.outlookindia.com/full.asp?fodname=20041220&fname=SMS+%28F%29&sid=1&pn=2
< Mobile Phone Gaming Takes Off In India | Integration Of Web & Retails Stores, i.e. Multiple Channels, Leads To Success For Many >
Display: Sort:
Display: Sort:
create account | faq | search