Latest Podcast



Featured Articles

Tuesday, March 30, 2010

The mobile web and your personal information

James Rosewell writes:

The mobile techie community has known about mobile networks and indeed some handsets providing unique information about mobile devices and customers for a long time. Collin Mulliner, a graduate student at the Technische Universitat Berlin, has recently bought the issue to the attention of the public during a talk at the CanSecWest conference in Vancouver.

Information such as IMEI and Mobile Phone Number is passed to web servers accessed by a mobile device or Mobile Network Operator (MNO) proxy server in hidden fields called HTTP Headers. The amount of information, format and ultimately usability of the information varies between MNO and mobile device. Practically, the inconsistency of the information makes it of little practical use to web sites. The apparent random nature of the information provided indicates MNOs haven’t really thought through how they’re configuring their gateways and proxies.

The following table shows the HTTP Header (hidden fields) provided by a mobile request received at thefonecast.com yesterday. Notice the x-up-calling-line-id field that contains the mobile number of the requesting device. (We've removed the mobile number from this example). This particular request was provided via the ZXWAP Gateway from ZTE.

 

Header Field
Value
Connection
Keep-Alive
Via
ZXWAP GateWay,ZTE Technologies
Accept
text/html,text/css,multipart/mixed,application/java-archive, application/java, application/x-java-archive, text/vnd.sun.j2me.app-descriptor, application/vnd.oma.drm.message, application/vnd.oma.drm.content, application/vnd.oma.dd+xml, application/vnd.oma.drm.rights+xml, application/vnd.oma.drm.rights+wbxml, application/x-nokia-widget, */*
Accept-Charset
iso-8859-1, utf-8; q=0.7, *; q=0.7
 
Accept-Encoding
gzip, deflate, x-gzip, identity; q=0.9
 
Accept-Language
en;q=1.0,id;q=0.5,vi;q=0.5
Host
wap.socmobi.com
User-Agent
Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 Samsung/SGH-i450/DBGL3 Profile/MIDP-2.0 Configuration/CLDC-1.1 ) AppleWebKit/413 (KHTML, like Gecko) Safari/413
x-up-calling-line-id
XXXXXXXXXX

The real point is that MNOs are seen to be taking liberties with customers personal information. There are many practical uses to providing this personal information “behind the scenes”. For example:

·    A web site that requests a telephone number can default the telephone number field to the mobile number provided by the mobile network reducing the amount of data the user needs to enter.

·    Multiple interactions can be related to one another without requiring explicit authentication.

On a darker note, once a malicious web site has a mobile number, the text message inbox would become the next target for spam.

Many people will be unhappy with this personal information being provided without consent. MNOs need to establish a clear and consistent policy around the dissemination of such information and ensure customers are in control of the personal information their mobile phone is giving out.

 

Print
Author: The Fonecast
0 Comments
Rate this article:
No rating

Categories: Networks and operators, OpinionNumber of views: 16207

Tags: security opinion internet

Leave a comment

This form collects your name, email, IP address and content so that we can keep track of the comments placed on the website. For more info check our Privacy Policy and Terms Of Use where you will get more info on where, how and why we store your data.
Add comment

Opinion Articles

A Sure Signal from Vodafone

Mark Bridge writes:

Today I've been using my mobile phone at home. For many people that’s not an unusual thing to do – but it is for me because, around here, coverage indoors isn’t particularly good. Downstairs it’s previously been non-existent. But this morning everything changed.

Author: The Fonecast
0 Comments
Article rating: No rating

Physician uses cell phones to bring health care to the poor

Natalia Ardanza of voanews.com writes:

In Africa there is another use for mobile phones. Public Health workers in Kenya are now using mobile phones to gather health information from patients in remote areas and upload it to the internet for instant analysis at distant centers. And it is all happening thanks to Dr Joel Selanikio.

Author: The Fonecast
0 Comments
Article rating: No rating

Making dumb touchscreen phones was a smart move

Mark Bridge writes:

I remember a report from last year that said ‘non-smart’ touchscreen handsets – generally those without a popular operating system – would be bad news for mobile operators.

Conventional touchscreen smartphones tended to result in higher-than-average ARPU thanks to their early-adopting tech-loving users, their web-friendly browsers, their email programs, their app-friendly operating systems and their fast 3G connectivity. However, dumber touchscreen devices – those with a manufacturer’s own proprietary OS and perhaps a clumsier browser – could generate 23% less ARPU than smarter phones. So, if touchscreen dumbphones weren’t good for networks… and weren’t really good for consumers either… manufacturers wouldn’t really bother with them. Right?

Author: The Fonecast
0 Comments
Article rating: No rating

"Hello Nexus One" I say...

James Rosewell writes:

Mark’s been encouraging me to write an opinion piece on the Nexus One for the last few days and I’m finally putting fingers to keyboard to share my experiences. It’s taken so long because this phone has so many features. On a positive note I could go into details about the gorgeous screen, the Android Marketplace that will out-sell Apple’s over the next 18 months, the built-in satellite navigation service and the speedy processor that makes everything run smoothly in real time. Or on a less positive note, the touch screen keyboard that sucks (think carefully about this if you’re a heavy texter or emailer, it’s even worse than the original iPhone), the lack of ActiveSync for Calendars and Tasks, no support for WMA music files or the clunky zoom functions on the web browser.

However I’m going to focus on voice dictation. Nexus One is the first phone I’ve used with this feature.

Author: The Fonecast
0 Comments
Article rating: No rating

The Amazon Kindle prepares to fight the Apple iPhone and Tablet

Mark Bridge writes:

Here’s a curious thing. Firstly, Amazon creates the Kindle. It starts selling the Kindle in the USA with a mobile deal that lets users download electronic books and newspapers wherever they are. Then it starts selling the Kindle to us in the UK, although – hang on a moment – it’s not talking about a UK mobile deal. Instead it still seems to be ‘roaming’ from the AT&T network. Next comes the larger-screen Kindle DX – also roaming away when it reaches our shores. And now Amazon is talking about third-party downloadable applications for the Kindle. Yes, a mobile device with downloadable apps. Hold that thought; I’ll be returning to it.

Author: The Fonecast
0 Comments
Article rating: No rating
RSS
First101102103104106108109110Last

Recent Podcasts

Reviewing our 2015 mobile industry predictions... and looking forward to 2016

Podcast - 15th January 2016

Iain Graham, James Rosewell and Mark Bridge return to review their mobile industry predictions from last year. Which mergers, partnerships and developments did they forecast correctly... and which didn’t work out as planned?

Later in the programme, the team anticipates some of the topics that will be hitting the headlines during 2016.

Author: The Fonecast
0 Comments
Article rating: No rating

Podcast from Mobile World Congress 2015

Podcast - 6th March 2015

Mark Bridge learns about the mobile technology trends at Mobile World Congress 2015 by chatting to James Rosewell of 51Degrees, Dr Kevin Curran from the IEEE and Chris Millington of Doro.

They talk about wearable devices, wireless charging, mobile operating systems and much more... including some of their favourite products from the exhibition.

Author: The Fonecast
0 Comments
Article rating: No rating

Looking back at February: from security scares to multiple MVNOs

Podcast - 27th February 2015

We're taking a look back at the biggest mobile industry news stories from February 2015, including allegations that the UK's security service tried to breach SIM card security by hacking into one of the world's biggest SIM producers.

We also talk about the planned BT and EE merger, the creation of two new UK virtual networks, some acquisitions in the mobile payment arena and a new Ubuntu smartphone.

Author: The Fonecast
0 Comments
Article rating: No rating

Interview with Chris Millington of Doro about mobile retailing, wearables and technology for older consumers

Podcast - 24th February 2015

In today's programme Mark Bridge talks to Chris Millington, who's Managing Director for Doro UK and Ireland.

They discuss the state of mobile retailing in the UK, the future of wearable devices and - as you might expect - smartphones for seniors.

Author: The Fonecast
0 Comments
Article rating: No rating

A month of mobile: O2 counts on 3, Microsoft counts to 10 and Apple counts its profits

Podcast - 30th January 2015

We're back with a month of mobile industry news, including takeover talks and takeover rumours. O2 and Three are said to be discussing a merger... but is there any truth in the suggestions that BlackBerry could be up for grabs?

We also discuss Apple's record-breaking quarterly figures, the highlights of CES and the launch of Microsoft Windows 10, as well as saying farewell to the current version of Google Glass.

Author: The Fonecast
0 Comments
Article rating: No rating
RSS
12345678910Last

Follow thefonecast.com

Twitter @TheFonecast RSS podcast feed
Find us on Facebook Subscribe free via iTunes

Archive Calendar

«June 2025»
MonTueWedThuFriSatSun
2627282930311
2345678
9101112131415
16171819202122
23242526272829
30123456

Archive

Terms Of Use | Privacy Statement