Snooping into phone records common practice
605672
NEW YORK -- Although the boardroom scandal at Hewlett-Packard Co. made the practice more widely known, buying phone records or other personal information obtained by ``pretext" calls appears to have been common in the business world.
616326
SAN FRANCISCO - In snooping on a reporter to pinpoint internal news leaks, Hewlett-Packard used high-tech tools common to spammers, phishers, retailers, suspicious employers and investigators. Those tools, including phishing-style e-mail and tracing software, underscore the growing use of electronic surveillance to monitor consumers' every digital move, computer-security experts say.
485870
A study released by the Customer Respect Group indicates that telecommunications companies are slipping when it comes to customer privacy, especially in comparison to retail and high-tech industries. A majority of companies surveyed were dound to ask for excessive, inappropriate personal data.
267695
New technology can trick a caller ID box into displaying the name and phone number of an entirely different person or company than the one actually calling.
110221
Users can search by file format, size, and duration.
449848
Cell phone owners currently enjoy a kind of privacy through obscurity: Wireless numbers aren&#39;t listed with directory assistance.
404537
The case examines the use of private detectives to obtain the phone records of board members and journalists.
298773
Researcher finds two flaws that under unusual circumstances could let a malicious program read private data or render a phone unusable.
740524
Living with ads that contact your cell phone and ask if they can be shown to you.
467664
(InfoWorld) - A highly sophisticated spying operation that tapped into the mobile phones of Greece's prime minister and other top government officials has highlighted weaknesses in telecommunications systems that still use decades-old computer code, according to a report by two computer scientists. The spying case, where the calls of around 100 people were secretly tapped, remains unsolved and is still being investigated. Also complicating the case is the questionable suicide in March 2005 of a top engineer at Vodafone GroupÂ in Greece in charge of network planning. A look into how the hack was accomplished has revealed an operation of breathtaking depth and success, according to an analysis on IEEE Spectrum Online, the Web site of the Institute of Electrical and Electronics Engineers. The case includes the "first known rootkit that has been installed in an [phone] exchange," said Diomidis Spinellis, an associate professor at the Athens University of Economics and Business, who authored the report with Vassilis Prevelakis, an assistant professor of computer science at Drexel University in Philadelphia. A rootkit is a special program that buries itself deep into an OS for some malicious activity and is extremely difficult to detect. The rootkit enabled a transaction log to be disabled and allow call monitoring on four switches made by Telefonaktiebolaget LM Ericsson within Vodafone's equipment. The software enabled the hackers to monitor phone calls in the same way law enforcement would, minus the required court order. The software allowed for a second, parallel voice stream to be sent to another phone for monitoring. The intruders covered their tracks by installing patches on the system to route around logging mechanisms that would alert administrators that calls were being monitored. "It took guile and some serious programming chops to manipulate the lawful call-intercept functions in Vodafone's mobile switching centers," the authors wrote. The secret operation was finally discovered around January 2005 when the hackers tried to update their software and interfered with how text messages were forwarded, which generated an alert. Investigators found hackers had installed 6,500 lines of code, an extremely complex coding feat. "The size of the code is not something that somebody could hack in a weekend," Spinellis said. "It takes a lot of expertise and time to do that." The investigation, which included a Greek parliamentary inquiry, netted no suspects, due in part to key data that was lost or destroyed by Vodafone, the authors wrote. It's not known if the hack was an inside job. Vodafone may have been able to discover the scheme sooner through statistical call analysis that could have linked the calls of those being monitored to calls to phones used to monitor the conversations, they wrote. Carriers already do that sort of analysis, but more for marketing than security. But the defense against rogue code, viruses and rootkits is complicated due to how telecom infrastructure has developed. "Complex interactions between subsystems and baroque coding styles (some of them remnants of programs written 20 or 30 years ago) confound developers and auditors alike," the report said.
66795
The secret lobbying campaign your phone company doesn't want you to know about
494440
This week, a company is launching technology that will make it possible for someone to choose what appears on phones that have Caller ID, the feature for displaying identifying information about an incoming call.
691737
By Dana M. Nichols, The Record, Stockton, Calif.  Jun. 4--SAN ANDREAS -- An obscure change in rules for federal courts soon might make it easier for the general public to find and obtain copies of local governments' electronic records, such as e-mail and even voice messages.
425151
(InfoWorld) - Verizon Wireless Inc. has sued Hewlett-Packard Co.'s (HP's) private investigators for faking their identities to obtain other people's phone records, a practice known as "pretexting." In a case filed Thursday in U.S. District Court in New Jersey, Verizon asked a judge to award it damage payments and to block the defendants from gaining any more records. Verizon said it did not know the investigators' identities, but defined them as "John and Jane Does" who were retained by HP in 2005 and 2006 to investigate confidential information leaks from HP's board of directors, according to the lawsuit. Those people obtained private information about Verizon Wireless customers by using pretexting calls to gain access to the company's protected computers and data storage facilities. They then sold that information. Both actions violate the national Computer Fraud and Abuse Act, Verizon said. The scandal has already forcedÂ Patricia Dunn to resign as HP board chairman, andÂ sparked investigations by the California attorney general and the U.S. House of Representatives. In court papers, Verizon described how a woman called Verizon customer service on May 17, 2005, asking to see phone records for an HP director. She called back three days later, arranging to block text messages to that phone and logging on to the person's online account. Then, on Feb. 1, 2006, someone called Verizon customer service again, asking for the number of a second phone on that account. Later that day, the person logged into the account again and changed the password, this time from a computer with a different IP (Internet Protocol) address. The next day, someone called Verizon and asked to see call records of the director's spouse. Verizon workers grew suspicious and placed a warning on the account. Someone called again on March 1, offered the spouse's Social Security number and asked for the mobile phone number. Already wary, Verizon workers called the mobile phone and found that the customer's voicemail did not match the caller's voice. When someone tried again to access the records on March 14, Verizon workers refused. Verizon hopes the lawsuit will help restore its customers' confidence in the security of their records, saying that its reputation has been harmed by the spying. "Verizon goes to great lengths to protect confidential customer information," including training its customer service representatives to identify the schemes used by illegal data brokers, the suit said. Despite those precautions, the HP investigators used "fraud, trickery and deceit" by making pretexting calls to Verizon representatives to gain unauthorized online account access, the suit alleges. Verizon said it will update the suit once it learns their identities. Â ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
233708
A cell phone directory is in the works, along with legislation to keep it private. Is this a good thing?
95984
U.S. lawmakers on Thursday plan to  shine a spotlight on Hewlett-Packard Co.'s  snooping  into the telephone records of some board members and  journalists, a practice that Congress may soon ban.
25182
Three former Hewlett-Packard employees and six private investigators take the Fifth in hearings on their phone records access. The head of the congressional committee says he's never seen anything like it. In 27B Stroke 6.