Forum Home
PC World Chat
Thread ID: 57803	2005-05-13 05:04:00	Im confused	sambaird (47)	PC World Chat

Post ID	Timestamp	Content	User
354695	2005-05-13 05:04:00	Reading about how the 027 network mailboxes were hacked i got confused some places were saying that you turn your pin off to protect your self but other were saying to turn it on Telecom customers can protect themselves by disabling the Optional PIN feature on voicemail accounts. By disabling the feature, an attacker is unable to access the account. Computerworld understands some Government departments and private companies have already started instructing their staff to disable the Optional PIN feature. "Customers can protect themselves against this sort of hacking by making sure pin numbers are switched on, on their voice mail services. Currently two thirds of customers have pin numbers switched on," says Goulter. Users of Telecom’s mobile phone network can protect themselves by disabling Optional PIN entry. computerworld.co.nz tvnz.co.nz www.computerworld.com ???????????????????	sambaird (47)
354696	2005-05-13 05:15:00	Confusing end users is a worse security issue than a technical vulnerability - it will take much longer to put right than a simple software patch or a hardware recall. And there's nothing at all about it on the Telecom site.	vinref (6194)
354697	2005-05-13 05:23:00	Confusing end users is a worse security issue than a technical vulnerability - it will take much longer to put right than a simple software patch or a hardware recall. And there's nothing at all about it on the Telecom site. I got it now its if you have it set to not ask for a pin if your calling from your phone. then they just fake it to make telecome think you are calling from the phone you are trying to hack using VOIP www.aardvarkforums.co.nz By using a VoIP gateway that is connected to the PSTN. Basically you're setting your VOIP phone to say it's 64xxxxxxx and the foreign carrier who has the interconnection with the VoIP provider is simply passing that ANI information along with the voice call. Many VoIP providers overseas are allowing this to happen because companies are taking advantage of cheap VoIP call rates to make calls but want proper ANI information to be passed so it looks as though it's originating from a phyiscal number in that country. You have to enter a default password for the Telecom voicemail platform. The Telecom voicemail platform however checks the number you are calling from and looks to see what phone number the mailbox belongs to. If it sees the numbers match it doesn't ask you for a password by default. If the numbers do not match it asks you for a password. The Telecom recommendation is that you change the option so that you need to enter your password every time you call, whether it be from your own phone or another phone. You can do a similair thing with SMS messages, there are numerous gateways on the internet that allow you to fake the from number of an SMS. Sounds reletivly easy	sambaird (47)
1