funsec mailing list archives

RE: Cellphone spam and terrorism


From: "Richard M. Smith" <rms () computerbytesman com>
Date: Wed, 21 Sep 2005 17:22:18 -0400

A SMS spammer program could also be written in about 50 lines of JavaScript
code.  Many wireless companies have Web forms for sending out SMS messages
which can be driven by JavaScript.  Example:

http://www.vtext.com/customer_site/jsp/messaging_lo.jsp

Richard 

-----Original Message-----
From: Blanchard_Michael () emc com [mailto:Blanchard_Michael () emc com] 
Sent: Wednesday, September 21, 2005 4:58 PM
To: rms () computerbytesman com; funsec () linuxbox org
Subject: RE: [funsec] Cellphone spam and terrorism

Or better (?) yet, That same 14 year old kid, accidentally sends to all cell
phone e-mail addresses with a spammer program that substitutes <your
cityname here> with the city the area code is from:

FEMA & CDC ALERT
For the greater <your cityname here> area!!!
Anthrax attack in progress
Evacuate <your cityname here> at once!


Yikes, either message would cause widespread panic...

 Mike B


Michael P. Blanchard
Antivirus / Security Engineer, CISSP, GCIH, MCSE, MCP+I Office of
Information Security & Risk Management EMC ² Corporation 4400 Computer Dr. 
Westboro, MA 01580
email:  Blanchard_Michael () EMC COM 

-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org] On
Behalf Of Richard M. Smith
Sent: Wednesday, September 21, 2005 4:08 PM
To: funsec () linuxbox org
Subject: [funsec] Cellphone spam and terrorism

Imagine for a second if some 14-year old kid in Washington DC sent out the
following text message to 50,000 cellphones in the DC area code:

    FEMA Alert:  Anthrax attack in progress -- leave Washington at once.

It's a really bad idea that cellphone email addresses are predictable.
(ie., a cellphone email address is the same as the phone number)

Richard 

-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org] On
Behalf Of David Ulevitch
Sent: Wednesday, September 21, 2005 3:13 PM
To: funsec () linuxbox org
Subject: [funsec] Thank you Rodney Joffe

http://news.yahoo.com/s/ap/20050921/ap_on_hi_te/cell_phone_spam


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: