Active Topics

 


Reply
Thread Tools
RevdKathy's Avatar
Posts: 2,173 | Thanked: 2,678 times | Joined on Oct 2009 @ Cornwall, UK
#1
There's a long complex reason why I need to know this, but it occured to me that you folks could well be the people who know the answer to this. (Looks hard at Frals!)

Put simply: if you have someone else's phone number, is it possible to make a text message (sms) appear on your phone as if it is from them?

If the answer to that is yes, what would you need? (internet, specific phone etc)

If the answer is yes, how difficult is it?

I'm guessing it's probably possible with a maemo device by doing things to the database in xtermnal. But if you had some other phone?

What I have in mind is the use of text messages as evidence - someone accused of sending inappropriate texts: can that be feigned to get them into trouble? (no, I'm not looking to get someone into trouble - rather out of trouble!)

so... clever peeps? Is this possible?
__________________
Hi! I'm Kathy and I'm a Maemo Greeter! Welcome.
Useful links for newcomers: New members say hello , New users start here, Community subforum, Beginners' wiki page, Maemo5 101, Frequently Asked Questions (FAQ)
Did you know Meego.com has forums too?
 
juise-'s Avatar
Posts: 186 | Thanked: 192 times | Joined on Jan 2010 @ Finland
#2
Originally Posted by RevdKathy View Post
I'm guessing it's probably possible with a maemo device by doing things to the database in xtermnal. But if you had some other phone?
At least with Nokias, you could use the PC Suite (or what ever it is called) to export (back up) the messages to your PC. The file format is plaintext (CSV) so it can be edited with a normal text editor. Then just restore the "backup" to your phone.

Haven't tried, but can't think of any reason why it wouldn't work.
__________________
Trout have underwater weapons.
 
Posts: 336 | Thanked: 610 times | Joined on Apr 2008 @ France
#3
Also, any good lawyer you could through this kind of evidence out. It's easy to tamper with (as juise- explained), considering anyone has access to the memory for prolonged periods of time (not really, but the court will only hear this).

However, depending on the laws of the country you reside in, it could be that the mobile phone operator has logs of the texts that were exchanged. Maybe not the content, but time/date, and origin/destination. This is a long shot, and before you get access to the logs, you'll need some good gloves to hold on to 'em bucking horses.

The truth is any phone runs software, on which you can run applications, and which can be modified if you have the right tools (in this case, manufacturer tools). No data is ever secure, unless it's on a secure device (such as a blackberry with high security profile).
 
ossipena's Avatar
Posts: 3,159 | Thanked: 2,023 times | Joined on Feb 2008 @ Finland
#4
Originally Posted by RevdKathy View Post
There's a long complex reason why I need to know this, but it occured to me that you folks could well be the people who know the answer to this. (Looks hard at Frals!)

Put simply: if you have someone else's phone number, is it possible to make a text message (sms) appear on your phone as if it is from them?

If the answer to that is yes, what would you need? (internet, specific phone etc)

If the answer is yes, how difficult is it?

I'm guessing it's probably possible with a maemo device by doing things to the database in xtermnal. But if you had some other phone?

What I have in mind is the use of text messages as evidence - someone accused of sending inappropriate texts: can that be feigned to get them into trouble? (no, I'm not looking to get someone into trouble - rather out of trouble!)

so... clever peeps? Is this possible?
how familiar are you with python?

what about sqlite?

python way (thanks to frals who made it to work) can be found there:

http://gitorious.org/vertsms/vertsms...vertsms/sms.py

small modification plus removing those pdu stuff should leave you with strings to put desired info and then just run the code and there you have it.


btw it is called rtcom-eventlogger
http://wiki.maemo.org/Documentation/...om-eventlogger


e: if you want to do same with other phones, you must send correct pdu-string to the phone and that is all you need (so don't scrap the pdu-stuff then!)
__________________
Want to know something?
K.I.S.S. approach:
wiki category:beginners. Browse it through and you'll be much wiser!
If the link doesn't help, just use
Google Custom Search
 
juise-'s Avatar
Posts: 186 | Thanked: 192 times | Joined on Jan 2010 @ Finland
#5
Originally Posted by CrashandDie View Post
However, depending on the laws of the country you reside in, it could be that the mobile phone operator has logs of the texts that were exchanged. Maybe not the content, but time/date, and origin/destination. This is a long shot, and before you get access to the logs, you'll need some good gloves to hold on to 'em bucking horses.
This is a good point, the most foolproof way of (dis)proving that an SMS was sent from some number is to turn to the operator.

Edit: There's the caveat, that even the operator logs can be used only to determine whether a specific handset or mobile subscription was used to send a message. Proving that a person did or didn't send a message is far more difficult.

Actually, on my operator, I can get a listing of all outgoing calls and SMS from my account, with exact times and recipient phone numbers (with few last digits blocked with xxx) just by signing in to their customer service website. Such a listing would not be enough to disprove message content though, if there has been some communication between parties.

I think that by law, operators in Finland must be able to provide a complete breakdown of outbound events on customer's request, since it's the basis for billing. Don't know about other countries though.
__________________
Trout have underwater weapons.

Last edited by juise-; 2010-06-24 at 11:27.
 
ossipena's Avatar
Posts: 3,159 | Thanked: 2,023 times | Joined on Feb 2008 @ Finland
#6
Originally Posted by juise- View Post
This is a good point, the most foolproof way of (dis)proving that an SMS was sent from some number is to turn to the operator.

Actually, on my operator, I can get a listing of all outgoing calls and SMS from my account, with exact times and recipient phone numbers (with few last digits blocked with xxx) just by signing in to their customer service website. Such a listing would not be enough to disprove message content though, if there has been some communication between parties.

I think that by law, operators in Finland must be able to provide a complete breakdown of outbound events on customer's request, since it's the basis for billing. Don't know about other countries though.
exactly. if you play with PDU strings and send a string with false sender number, do not get caught....
__________________
Want to know something?
K.I.S.S. approach:
wiki category:beginners. Browse it through and you'll be much wiser!
If the link doesn't help, just use
Google Custom Search
 
RevdKathy's Avatar
Posts: 2,173 | Thanked: 2,678 times | Joined on Oct 2009 @ Cornwall, UK
#7
Thanks guys. Looks like it would be beyond the person I am thinking of. The stuff about phone records I will leave to the union and lawyers. I know someone who has been accused of sending inappropriate texts, and wanted to know how easy it would be for the recipient to fake it, with some internet access and possibly some geek knowledge. I doubt she'd be advanced enough to do what you're suggesting, and wouldn't have access to PC suite. (Note to self, check available computers for nokia pc suite!)

The other question is whether someone else had access to the phone - and presumably the records will show the time of sending.

I just find it hard to believe this particular someone would be that stupid.
__________________
Hi! I'm Kathy and I'm a Maemo Greeter! Welcome.
Useful links for newcomers: New members say hello , New users start here, Community subforum, Beginners' wiki page, Maemo5 101, Frequently Asked Questions (FAQ)
Did you know Meego.com has forums too?
 
juise-'s Avatar
Posts: 186 | Thanked: 192 times | Joined on Jan 2010 @ Finland
#8
Originally Posted by RevdKathy View Post
I know someone who has been accused of sending inappropriate texts, and wanted to know how easy it would be for the recipient to fake it, with some internet access and possibly some geek knowledge.
Ok, what about all these services (on the intertubes) where you can send SMS and specify the number they appear to be coming from? (Caller ID)

I think there might even be an iPhone app for that.

Edit: For example, this (http://www.freebiesms.co.uk/) might apply in your area. (Be careful though, you might unleash an SMS spam hell if you try it on yourself)
__________________
Trout have underwater weapons.

Last edited by juise-; 2010-06-24 at 12:03.
 
RevdKathy's Avatar
Posts: 2,173 | Thanked: 2,678 times | Joined on Oct 2009 @ Cornwall, UK
#9
Originally Posted by juise- View Post
Ok, what about all these services (on the intertubes) where you can send SMS and specify the number they appear to be coming from? (Caller ID)

I think there might even be an iPhone app for that.

Edit: For example, this (http://www.freebiesms.co.uk/) might apply in your area. (Be careful though, you might unleash an SMS spam hell if you try it on yourself)
Now that's the sort of thing I was afraid of. This person is said to have handed his phone briefly to the complainant (long enough to clock and record the number, or even send it to her own phone). What made me wonder is that she's made this complaint before about others (which smelt faintly ratty to me.)

I'll test it on my spare sim card and my NHS number, I think. That would just leave the question whether that site is accessible from an NHS pc.

Edit: Costs £5 to pick up the text, and I don't think the NHS would like me dumping that on their bill! OTOH, it would be a small price to pay to get someone you don't like into trouble!
__________________
Hi! I'm Kathy and I'm a Maemo Greeter! Welcome.
Useful links for newcomers: New members say hello , New users start here, Community subforum, Beginners' wiki page, Maemo5 101, Frequently Asked Questions (FAQ)
Did you know Meego.com has forums too?

Last edited by RevdKathy; 2010-06-24 at 17:06.
 
ndi's Avatar
Posts: 2,050 | Thanked: 1,425 times | Joined on Dec 2009 @ Bucharest
#10
What phone models are involved? I couldn't find the info, sorry if I missed it.

It's not hard to emulate a SMS, but I think you are making a mistake in assuming a person's ability is beyond it. In many countries, I'm assuming yours too, there are people that have high knowledge of phone's inneards and do several ... services for a few bucks. Such as flashing, unlocking, etc. Such a person and 5$ could make anything appear. I've seen these guys unlock phones launched yesterday.

What you can't really fool is the phone company. Well, you can, but you need gateway access and that's way harder. Way.

Phone models also count, because a lot of phones are susceptible to infection. Most symbians are. As a result, a slightly modified virus could be sent by accepting a BT link (easily done if you get a hold of the device for even a couple of seconds). Such a virus could be used to send anything to anybody, complete with phone company records. If this the case, good luck with that.

It might sound like science fiction, but remember, the unlocker guy a few blocks from you will do this for a few bucks. Heck, I think I can if I really want to. Old viruses are now open and some use txt files to read number and message.

Oh, also, on a lot of models, Nokia PC suite doesn't restore SMS'. This could exclude that. Still, I believe it to be the easiest way by far. Just fiddle with an editor in the backup and wait for the idea to strike.
__________________
N900 dead and Nokia no longer replaces them. Thanks for all the fish.

Keep the forums clean: use "Thanks" button instead of the thank you post.
 
Reply


 
Forum Jump


All times are GMT. The time now is 03:48.