Your cellphone can be easily compromised

[Sledgstone 8,672]

http://www.npr.org/blogs/alltechconsidered/2013/07/15/201490397/How-Hackers-Tapped-Into-My-Verizon-Cellphone-For-250
 

In the wake of the National Security Agency cyber-spying revelations, you may be worrying about the government keeping track of your digital life. But, for less than $300, a group of ordinary hackers found a way to tap right into Verizon cellphones.

This is a group of good-guy, or "white hat", hackers. They hacked the phones to warn wireless carriers that the phones have a security flaw.

I got to experience having my phone broken into. I met the hackers at a hotel room in downtown San Francisco. A moment after I stepped in, Tom Ritter pulled me over to look at a computer screen. Ritter is a security consultant for , which specializes in helping companies locate technology security flaws.

As I looked down at Ritter's laptop screen, he pointed to a number.

"Is this your phone number?" he asked.

It was. The minute I'd walked into the room Ritter had gotten into my phone.

Then, he showed me how he could listen to my conversations. I called up Nico Sell, who works with Ritter. We had a brief conversation. After I hung up, Ritter played a recording of the entire call for me.

Ritter said he was able to tap into my call with something called , also known as a wireless network extender. The one he used was made by Samsung for Verizon and cost about $250. The femtocell is about the size of a wireless router. You can buy one at Best Buy.

And, Ritter said, "Everything we did can be done with free software you can download online — nothing terribly special."

He says companies like Verizon support these devices for customers who live in rural areas or high-rise buildings and have poor cellphone reception.

"You can get these from carriers to give yourself a better signal," he said.

Ritter explained that the femtocell is basically cell phone tower; that's why it's able to pick up all the phone signals around it. In case you were wondering, it also intercepts your text messages, including photos and if you use the browser to sign into your bank's website, the device will be able to get your login and password. Yikes!

Ritter says someone has to be within around 40 feet of the femtocell for it to tap into their phone. But, given that it can fit in a purse Ritter imagines a lot of situations where getting close enough would be easy.

 

 

I originally heard this story back in July and I figured I'd post a topic about it. Cellphone companies have to ensure that people can use their service in their homes, but many newer homes have great roofing insulation.. so good that it blocks RF signals aka cellphone service as a side effect. So the cellphone companies made a product called a femtocell to give people in blackout areas or low signal areas full cellphone service. My brother had one of these when he was using Sprint. It connected to his high speed internet and he got a much better signal. These femtocells can be bought in electronic stores and online.. The range on these are small.. If someone is going to spy on you, it'll most likely be a neighbor in an apartment building where more people could be affected. Your phone will not show any roaming bars or give you any notification that you are on a femtocell (some might give you a double dial tone but only when making a call, not receiving one).. the phone will look like its on a regular connection and you will never know if someone is reading all your texts or recording your calls.

 

Now think about how easily the police or NSA can listen in..