|
Date: Sat, 27 Jun 1998 16:30:53 +0000 From: kevin <pyro@DRUNKS.COM> To: BUGTRAQ@NETSPACE.ORG Subject: Bell Atlandic Mobile "Encryption" This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --0-642854143-898965053=:7832 Content-Type: TEXT/PLAIN; charset=US-ASCII I know this isn't a major vulnerability, but it is interesting. While experimenting with text paging on my cellular phone from Bell Atlantic I read the following on their web site: Bell Atlantic Mobile has encrypted your phone number as a courtesy, however the protocol for encryption is proprietary and we cannot guarantee its security. Bell Atlantic Mobile is not responsible for the number or content of messages lost or misdirected due to interruptions or fluctuations in the Internet. I found that its not even encrypted, its simply encoded. Its fairly simple and straight forward so I won't bore you with the details, but I attached a decoding program. Kevin Seales kevin@drunks.com --0-642854143-898965053=:7832 Content-Type: TEXT/PLAIN; charset=US-ASCII; name="decode.c" Content-Transfer-Encoding: BASE64 Content-ID: <Pine.BSF.3.96.980627163053.7832B@shoelace.digivill.net> Content-Description: I2luY2x1ZGUgPHN0ZGlvLmg+DQoNCmludCBtYWluKHZvaWQpDQp7DQogIGNo YXIgbW9iaWxlX2lkWzE5XTsNCg0KICBwcmludGYoIlRoaXMgcHJvZ3JhbSB0 YWtlcyB0aGUgTW9iaWxlIElEIEJlbGwgQXRsYW50aWMgZ2l2ZXMgeW91IHRv XG4iKTsNCiAgcHJpbnRmKCJwdXQgb24geW91ciB3ZWIgcGFnZSBhbmQgZGVj b2RlcyBpdCB0byBnaXZlIHlvdSB0aGUgcmVhbCBwaG9uZVxuIik7DQogIHBy aW50ZigibnVtYmVyLlxuQ29kZWQgYnkgS2V2aW4gU2VhbGVzLCBrZXZpbkBk cnVua3MuY29tXG5cbiIpOyANCiAgcHJpbnRmKCJFbnRlciBNb2JpbGUgSUQg TnVtYmVyOiAgIik7DQogIHNjYW5mKCIlcyIsICZtb2JpbGVfaWQpOw0KDQog IHByaW50ZigiVGhlIFJlYWwgTW9iaWxlIElEIE51bWJlciBpczogIik7DQog IHByaW50ZigiJWMlYyVjIiwgbW9iaWxlX2lkWzE5XSxtb2JpbGVfaWRbMThd LG1vYmlsZV9pZFsxN10pOw0KICBwcmludGYoIi0iKTsNCiAgcHJpbnRmKCIl YyVjJWMiLCBtb2JpbGVfaWRbM10sbW9iaWxlX2lkWzEyXSxtb2JpbGVfaWRb MTRdKTsNCiAgcHJpbnRmKCItIik7DQogIHByaW50ZigiJWMlYyVjJWNcbiIs IG1vYmlsZV9pZFs2XSxtb2JpbGVfaWRbMTZdLG1vYmlsZV9pZFs4XSxtb2Jp bGVfaWRbOV0pOw0KDQp9DQo= --0-642854143-898965053=:7832--
|