If you are on EE or 3 put a mandatory PIN on your voicemail

[Burrito]

Max_Torque said:

Frankly, anyone who manages to listen the whole way through a voice mail left by my mum is made of stronger stuff than I!! Most people leave voice mails like "i'll call you back in a bit" or "see you Saturday" or similar. My mum? OH NO, it needs to be at least 25min long, and cover the finer details of every single thing that is going to, might be, or has happened to absolutely everyone we know, and often several people we don't, for about the next 10,000 years........

It appears that we're related!

Does she also fail to hang up *every* time she leaves a message, so you get an extra 5 minutes of her talking to herself/the dog/the radio?!

[simonrockman]

I've had a statement from EE:

“Thanks to Simon and The Register, for bringing this to our attention. Our engineers have worked hard since then to identify the root fault and work on a fix. We can now confirm that we have urgently updated our systems and patched the issues, raised in the article.”

[Mr E]

I read the piece with interest. I'd like to say I was surprised...

...not so much as it happens

[devnull]

Honestly, who cares. The fact that

A) voicemail (and lots of telecoms services actually) is authenticated by cli and
B) cli is very very easily manipulated

Is nothing new. This is about as newsworthy as that dustbin bloke who "wrote an app".

[Stinkfoot]

Most of my voice are from the misus asking why I am not picking up the phone (cos I am driving and pissed off with hand free devices) or her asking me to pick up something from from the shop.

If some looney feels the need to listen to them then they can go and fill their boots.

[Digger]

simonrockman said:

I'm a journalist, I wrote it up for the website were I work.

. . .

Tsk!

[cornet]

Nice work - we've found similar exploits with SMS messages (which thankfully have been fixed) on some mobile networks.

[gpo746]

Mr Rockman is a legend IMHO. used to love his old articles in magazines from years ago.
Some people may have been aware of the loophole many won't have.
Another off topic thing is that if you are on Orange you can (or could) get its number of rings before being picked up by answer phone changed if you ring them.
Personally I just don't bother with voicemail full stop.

[simonrockman]

Digger said:

simonrockman said:

I'm a journalist, I wrote it up for the website were I work.

. . .

Tsk!

Yup. No subs on PH. The Reg subs are brilliant.


Simon