Are Hackers Tracking You via Your Cell Phone?

While it sounds like something from the movie Enemy of the State, new research from the University of Minnesota College of Science and Engineering indicates that attackers can capture the same information used by cellphone companies to track cellular handsets to pinpoint a target’s location. This attack leverages features of the GSM communication stack to perform location tests without the alerting the target.

These location tests are used by cellular providers to find the best path on their networks to route calls and can be accurate to a 10-block area in metropolitan areas. 3rd party access to this data usually requires a warrant. However using commodity hardware and open source technology, the researchers were able to directly capture this information. They did not have to contact the local cellular company for access.

The authors conclude that this formation could be used by oppressive regimes to track down dissidents or for thieves could target a person and identify when they were no longer at their home.

The authors have contacted carriers and phone handset manufactures, such as AT&T and Nokia to discuss mitigation techniques and are working on responsible disclosure statements for cellular service providers.

Source Article:

Cellphone Tethering: Is it a big deal?

Is a smartphone really that smart if providers put limits on how its data connection is used? Cellphone tethering, or using your cell phone to access internet services on your computer, is in the news because of recent actions by Apple, Palm, and Google.

Apple is releasing their new OS for their phones, dubbed iPhone 3.0, that includes tethering – unless you live in the US because AT&T tethering support isn’t available yet. Earlier this spring, Google pulled all tethering apps from the Android app store at T-Mobile’s request. Palm has sent a polite cease and desist to the “Pre Dev Wiki” website asking for tethering instructions to be removed because they might upset Sprint, Palm’s exclusive service partner in the US. Given that tethering has been available on phones for several years now, why are cell providers suddenly so concerned? Are they worried that customers would cancel their land based internet connections in favor of cellular based ones? Or that tethering would cut into the USB data card market? Read more