Security breach on PinePhone UBports SMS
#6
(07-30-2020, 12:25 PM)Athansor Wrote: UPDATE: This gets better and stranger.

about 1.5 hours with Cricket support (much of which was done on my PP, yay!). My account has been reset entirely via their web interface, so if someone has jacked the card, they cannot access the account easily. They also "reset" my SIM card (I have *no* idea what that means, if anything), and after whatever they did, I can now receive texts from them. I still cannot receive texts from individual phones, however.

I am less concerned, as I have sent no critical financial or other information through my PP. My cricket account was the only one through which the phone might have had access, and that's gone.

I still have no idea what the source of the issue is, and the possibility of being SIMjacked is concerning. As much fun as I've been having, I think I'm going to put my PP on the shelf for a few months and see where things stand in the fall or early winter.StWonder if same experience would be had if off developer channel? (dev channel warns it may mess with your experience and is untested). UT Stable seems the best option for weeding out possible carrier/sim problems.

I used to monitor cell towers and map locations after missing many texts on my Android (and to try to improve cell service by detecting/blocking imsi catcher/stingrays- a tower that moves is not a real tower). They are rampant in some parts of USA - mostly cities/protest areas. Mostly running lower g interception. Sometimes they do denial of service downgrade service attacks on all phones in area (each taking up to 10,000 phones at a time) to force them to connect to their man in the middle attack (by causing phones to believe they have better signal). Especially common in cities/protest areas.

This is why I mentioned turning 2g/3g off if possible to attempt to prevent interference.

My area had a lot of these devices hijacking phones indiscriminately, I believe this is what lead me to miss texts on my Android.

Personally I have my Pinephone set to 4G only (have had 0 issues, everything runs great- no delayed txts). Only the most advanced/most well funded adversary would have access to 4G imsi catcher to disrupt service. And no phone has protection from this- pinephone is no more vulnerable than Apple/Android.

It could be completely unrelated. I was just speculating. I really have no idea.

Maybe someone else will chime in.
- RTP

"In the beginner's mind there are many possibilities, in the expert's mind there are few." -Shunryu Suzuki


[ Pinephone Original | Pinetab v1 / v2 Enjoyer ]


Linux Device Privacy / Security Playlist





Messages In This Thread
RE: Security breach on PinePhone UBports SMS - by RTP - 07-30-2020, 01:03 PM

Possibly Related Threads…
Thread Author Replies Views Last Post
  ADB support on Pinephone Sumwun 3 1,794 09-27-2023, 04:04 PM
Last Post: Sumwun
  Ubuntu Touch vs Standard Pinephone OS MarsColonist 8 7,832 06-26-2023, 07:50 AM
Last Post: gregb49
  PinePhone and PinePhone Pro 20.04 Focal Install and Update c3l@ 0 1,117 05-12-2023, 05:06 AM
Last Post: c3l@
  Reinstall Ubuntu Touch on PinePhone with 10 drives? Peter Gamma 4 3,842 05-24-2022, 06:42 AM
Last Post: Peter Gamma
  PinePhone UBPorts Edition stuck on PINE64 logo screen Giovanni Iannotti 4 5,990 09-01-2021, 01:20 PM
Last Post: Giovanni Iannotti
  Images won't boot past pinephone logo remington_luger 9 11,472 08-22-2021, 09:56 AM
Last Post: remington_luger
  GhostCloud workaround for PinePhone mark1250 1 3,742 08-12-2021, 02:53 AM
Last Post: Uturn
  online accounts in UBports Uturn 2 4,834 03-30-2021, 09:12 AM
Last Post: Uturn
  UBPorts Not Working Pinoideae 7 11,169 03-13-2021, 01:51 PM
Last Post: KNERD
  How to enable Ethernet with UBPorts and convergence dock? piney-tim 1 3,411 11-27-2020, 07:40 PM
Last Post: piney-tim

Forum Jump:


Users browsing this thread: 3 Guest(s)