OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] Using SMS spoofing to locate almost anyone in the UK without their permission

From: Adam Laurie (adam.lauriethebunker.net)
Date: Wed Feb 08 2006 - 17:17:23 CST


Sebastian Wolfgarten wrote:
> Hi,
>
> interesting idea. However Major Malfunction did this ages ago (even in an
> automated manner where the individual does not have to respond to the text
> message as his software does instead) as part of the Trifinite's research on
> Bluetooth security. See their 22C3 presentation for more information.

Indeed... This was actually amongst the first knock-on effects we
thought up... (slides show it was April 2004):

   http://www.thebunker.net/press-bluetooth-defcon/mgp00009.html
   http://www.thebunker.net/press-bluetooth-defcon/mgp00010.html

The trifinite tool you mention we've now dubbed "BlueStalker"... which
reminds me... must get around to publishing it... :)

cheers,
Adam
--
Adam Laurie Tel: +44 (0) 20 7605 7000
The Bunker Secure Hosting Ltd. Fax: +44 (0) 20 7605 7099
Shepherds Building http://www.thebunker.net
Rockley Road
London W14 0DA mailto:adamthebunker.net
UNITED KINGDOM PGP key on keyservers

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/