4 ms·

Send SMS messages from any sender

30 points by AntonTrollback 15y ago

Swedish service. Update: I tried. works

alt_ 15y ago
Interesting. I didn't know it was possible, but, seeing as it is an UDP-like unidirectional message and an old system, it isn't surprising. Wikipedia has more information for the interested[1]. [1] http://en.wikipedia.org/wiki/SMS_spoofing http://en.wikipedia.org/wiki/SMS_spoofing
rokhayakebe 15y ago
You can use this trick to listen to anyone's voicemail (by identifying the calling number as the recipient's number) if they do not have a password. Anyone. Talk about security hole.
- getsat 15y ago
  IIRC, this same flaw was used by Murdoch's papers to hack various celebrities'/deceased individuals' voicemails.
- brk 15y ago
  It depends, many voicemail system require a PIN, especially after some of the recent exploits. BTW, this is talking about SMS, not CID spoofing, so your comment wasn't exactly on topic.
- olihb 15y ago
  This doesn't work on my cellphone's voicemail. I guess the new systems closed that hole.
  - rokhayakebe 15y ago
    I am not sure about that. I tried it as recently as 6 months ago.
danielrhodes 15y ago
You can do this from any SMS gateway, as there is no real verification. However most gateways do not allow their users to spoof the sender because predictably the carriers do not like it.
- mino 15y ago
  Indeed, it's nothing new. I've used this trick so many times with friends :)
  - crypteasy 15y ago
    If you don't mind me asking, how do you do it?
nivertech 15y ago
"Kostnaden för sms:et är 10 kr plus eventuell operatörsavgift." "The cost of the text message is 10 SEK plus possible operator fees" 10 SEK = $1.5 USD
mootothemax 15y ago
Any decent SMS gateway should let you send messages from who the hell you want. Add far as analogies go, it works pretty much the range as email, and would take the same fundamental redesign to fix.
- jonknee 15y ago
  Email at least has SPF records and DKIM.
- kevinburke 15y ago
  At least in the US it's against the law to spoof a 'From' SMS address you don't have access to.
gst 15y ago
Nothing new. Skype also allows you to freely choose the sending number of your SMS (however, it first checks if you can receive SMS at this number).
dools 15y ago
We have this feature in 8centsms.com but we verify ownership of mobile numbers. We've had problems with spammers sending fraudulent "from" headers like "BTUK" (ie. british telecom) so we recently put in some checks to ensure we have to manually verify each account once they spend up to a certain amount. I think that if you're blindly allowing people to spoof the sender id you're just asking for trouble ... Also this seems to be a pretty expensive prank ;)

Swedish service. Update: I tried. works

alt_ 15y ago

Interesting. I didn't know it was possible, but, seeing as it is an UDP-like unidirectional message and an old system, it isn't surprising. Wikipedia has more information for the interested[1]. [1] http://en.wikipedia.org/wiki/SMS_spoofing http://en.wikipedia.org/wiki/SMS_spoofing

rokhayakebe 15y ago

You can use this trick to listen to anyone's voicemail (by identifying the calling number as the recipient's number) if they do not have a password. Anyone. Talk about security hole.

getsat 15y ago
IIRC, this same flaw was used by Murdoch's papers to hack various celebrities'/deceased individuals' voicemails.
brk 15y ago
It depends, many voicemail system require a PIN, especially after some of the recent exploits. BTW, this is talking about SMS, not CID spoofing, so your comment wasn't exactly on topic.
olihb 15y ago
This doesn't work on my cellphone's voicemail. I guess the new systems closed that hole.
- rokhayakebe 15y ago
  I am not sure about that. I tried it as recently as 6 months ago.

danielrhodes 15y ago

You can do this from any SMS gateway, as there is no real verification. However most gateways do not allow their users to spoof the sender because predictably the carriers do not like it.

mino 15y ago
Indeed, it's nothing new. I've used this trick so many times with friends :)
- crypteasy 15y ago
  If you don't mind me asking, how do you do it?

nivertech 15y ago

"Kostnaden för sms:et är 10 kr plus eventuell operatörsavgift." "The cost of the text message is 10 SEK plus possible operator fees" 10 SEK = $1.5 USD

mootothemax 15y ago

Any decent SMS gateway should let you send messages from who the hell you want. Add far as analogies go, it works pretty much the range as email, and would take the same fundamental redesign to fix.

jonknee 15y ago
Email at least has SPF records and DKIM.
kevinburke 15y ago
At least in the US it's against the law to spoof a 'From' SMS address you don't have access to.

gst 15y ago

Nothing new. Skype also allows you to freely choose the sending number of your SMS (however, it first checks if you can receive SMS at this number).

dools 15y ago

We have this feature in 8centsms.com but we verify ownership of mobile numbers. We've had problems with spammers sending fraudulent "from" headers like "BTUK" (ie. british telecom) so we recently put in some checks to ensure we have to manually verify each account once they spend up to a certain amount. I think that if you're blindly allowing people to spoof the sender id you're just asking for trouble ... Also this seems to be a pretty expensive prank ;)