Latest Podcast



Featured Articles

Tuesday, March 30, 2010

The mobile web and your personal information

James Rosewell writes:

The mobile techie community has known about mobile networks and indeed some handsets providing unique information about mobile devices and customers for a long time. Collin Mulliner, a graduate student at the Technische Universitat Berlin, has recently bought the issue to the attention of the public during a talk at the CanSecWest conference in Vancouver.

Information such as IMEI and Mobile Phone Number is passed to web servers accessed by a mobile device or Mobile Network Operator (MNO) proxy server in hidden fields called HTTP Headers. The amount of information, format and ultimately usability of the information varies between MNO and mobile device. Practically, the inconsistency of the information makes it of little practical use to web sites. The apparent random nature of the information provided indicates MNOs haven’t really thought through how they’re configuring their gateways and proxies.

The following table shows the HTTP Header (hidden fields) provided by a mobile request received at thefonecast.com yesterday. Notice the x-up-calling-line-id field that contains the mobile number of the requesting device. (We've removed the mobile number from this example). This particular request was provided via the ZXWAP Gateway from ZTE.

 

Header Field
Value
Connection
Keep-Alive
Via
ZXWAP GateWay,ZTE Technologies
Accept
text/html,text/css,multipart/mixed,application/java-archive, application/java, application/x-java-archive, text/vnd.sun.j2me.app-descriptor, application/vnd.oma.drm.message, application/vnd.oma.drm.content, application/vnd.oma.dd+xml, application/vnd.oma.drm.rights+xml, application/vnd.oma.drm.rights+wbxml, application/x-nokia-widget, */*
Accept-Charset
iso-8859-1, utf-8; q=0.7, *; q=0.7
 
Accept-Encoding
gzip, deflate, x-gzip, identity; q=0.9
 
Accept-Language
en;q=1.0,id;q=0.5,vi;q=0.5
Host
wap.socmobi.com
User-Agent
Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 Samsung/SGH-i450/DBGL3 Profile/MIDP-2.0 Configuration/CLDC-1.1 ) AppleWebKit/413 (KHTML, like Gecko) Safari/413
x-up-calling-line-id
XXXXXXXXXX

The real point is that MNOs are seen to be taking liberties with customers personal information. There are many practical uses to providing this personal information “behind the scenes”. For example:

·    A web site that requests a telephone number can default the telephone number field to the mobile number provided by the mobile network reducing the amount of data the user needs to enter.

·    Multiple interactions can be related to one another without requiring explicit authentication.

On a darker note, once a malicious web site has a mobile number, the text message inbox would become the next target for spam.

Many people will be unhappy with this personal information being provided without consent. MNOs need to establish a clear and consistent policy around the dissemination of such information and ensure customers are in control of the personal information their mobile phone is giving out.

 

Print
Author: The Fonecast
0 Comments
Rate this article:
No rating

Categories: Networks and operators, OpinionNumber of views: 7630

Tags: security opinion internet

Leave a comment

This form collects your name, email, IP address and content so that we can keep track of the comments placed on the website. For more info check our Privacy Policy and Terms Of Use where you will get more info on where, how and why we store your data.
Add comment

Opinion Articles

How AI technology is transforming the smartphone experience

How AI technology is transforming the smartphone experience

From improved performance to personalized recommendations, AI is enhancing the functionality and usability of smartphones for users

By incorporating advanced algorithms and machine learning capabilities, AI can help to optimize a smartphone's performance, providing users with a faster, more efficient and user-friendly experience.
Author: The Fonecast
0 Comments
Article rating: No rating
Whatever happened to all my tech?

Whatever happened to all my tech?

Mark Bridge revisits his mobile technology reviews

Mark Bridge writes:

I've been taking a look back at the devices I've written about during the past few years. Some are still faithful companions, others... well, let's just say my faith was misplaced.
Author: The Fonecast
0 Comments
Article rating: No rating

Predictions for 2016: Network Function Virtualisation, 4G throttling and video calling

Mark Windle, head of marketing at OpenCloud, predicts that this year’s reduction in the number of traditional telecoms operators in some countries will provide an opportunity for other operators to innovate and capture market share in 2016.

He says next year will be a year of rapid change for telecoms… whether it’s MVNO disruption, competitive tariff pricing or simply defence from the ‘dark art’ of hacking.

Author: The Fonecast
0 Comments
Article rating: No rating
Kapture review: the audio-recording wristband

Kapture review: the audio-recording wristband

A 'recording watch' that links to your smartphone

Mark Bridge writes:

The most memorable moments in life often go unrecorded. You don't have your camera in your hands. Your finger is still hovering over the 'pause' button on your audio recorder. Or you were simply too busy experiencing whatever was happening. It's all about the one that got away.

That's where Kapture can help.

Author: The Fonecast
4 Comments
Article rating: 4.0
Making mobile websites work better

Making mobile websites work better

Device detection and responsive design explained

Mark Bridge writes:

James Rosewell shows me a colourful roll of paper that's the width of an iPhone but well over three metres long. When I look closer, I can see it's a printed copy of the Wall Street Journal's mobile website. That's a lot of scrolling to do... and a pretty unfriendly user experience for anyone reading the news online. Why does it work so badly?

Author: The Fonecast
1 Comments
Article rating: 4.0
RSS
12345679Last

Recent Podcasts

A week of mobile industry news, including the latest security and privacy concerns

Podcast - 16th April 2014

We begin this week's podcast with a discussion about the Heartbleed bug, the effect it's having on the mobile industry and the wider issues for all internet users.

We're also talking about the future of BlackBerry, UK 4G coverage, new CEOs, Bluetooth connectivity, privacy concerns and the next generation of mobile processors.

Author: The Fonecast
0 Comments
Article rating: No rating

A new mobile move from Microsoft, a roaming revolution in Europe... and much more

Podcast - 9th April 2014

This week's podcast starts with news from Microsoft about an update to its Windows Phone platform and a cost-free OS offer to hardware manufacturers.

There's also a new flagship smartphone from Nokia, a roaming announcement from the European Parliament, a UK virtual mobile network from The Co-operative Group, a change at the top for Mozilla, retail expansion for Vodafone and an awkward end to BlackBerry's relationship with T-Mobile in the USA.

Author: The Fonecast
0 Comments
Article rating: No rating

Acquisitions, banking, complaints... and the rest of the week's mobile industry news

Podcast - 2nd April 2014

Acquisition announcements from Facebook and Intel are the first stories in this week's look at the latest UK mobile industry headlines.

They're followed by news about mobile payments, mobile banking, a phone with an invisible solar panel, customer complaints, low-cost 4G smartphones, productivity apps and an intriguing case of WhatsApp-itis.

Author: The Fonecast
0 Comments
Article rating: No rating

Smartphones, smart watches and SMS spam: all the week's mobile industry news headlines

Podcast - 26th March 2014

Iain Graham, James Rosewell and Mark Bridge are reunited for their regular weekly look at the latest UK mobile industry headlines.

Today they're talking about smart watches, an Apple iPhone announcement, the new HTC One M8, the closure of Ovivo Mobile, text spam, peer-to-peer messaging, government hacking and mergers.

Author: The Fonecast
0 Comments
Article rating: No rating

Designing mobile phones for seniors: we talk to Doro and Emporia Telecom

Podcast - 21st March 2014

Producing mobile phones for older customers requires much more than big buttons and a simple interface. At Mobile World Congress last month we spoke to two major players in this growing sector: Swedish company Doro and Austria's Emporia Telecom.

Our first conversation was with Harald Obereder, Chief Technology Officer at Emporia, who spoke to Mark Bridge about handset design and user interface design. This was followed by an interview with Chris Millington, Managing Director for Doro UK and Ireland, about research and development in the 'senior tech' market.

Author: The Fonecast
0 Comments
Article rating: No rating
RSS
First45679111213Last

Follow thefonecast.com

Twitter @TheFonecast RSS podcast feed
Find us on Facebook Subscribe free via iTunes

Archive Calendar

«March 2024»
MonTueWedThuFriSatSun
26272829123
45678910
11121314151617
18192021222324
25262728293031
1234567

Archive

Terms Of Use | Privacy Statement