?Sim Snooping? through VMM, SS7, Feature Request #13
Comments
bartman081523
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
{{ message }}
bartman081523
changed the title
Good day,
So, i have noticed very uncommon logs in
/data/data/com.google.android.dialer/cache/persistent_log/plain_text/68
that looks like the SIM Card wants to know wether the Phone has VVM abilities.
The Visual Voice Mail (VMM) Standard is an implementation in IMAP4 (OMPL) from 2010 and is looking a bit disturbing, since it is only secured by UID and MD5, see http://www.omtp.org/OMTP_VVM_Specification_v1_3_Final.pdf
especially sec. 2.1.2 & 2.1.3 :
...
The following message types can be retrieved via the VVM service:
...
Infotainment: A voice message deposited directly to the
subscriber mailbox by an external application.
...
The table below lists the file formats supported by the protocol.
...
Fax attachments PDF application/pdf
^^What could possibly go wrong...
The Voicemal Package also has Internet and Send SMS Permission.
from:
https://gitlab.e.foundation/e/os/android_packages_apps_Dialer/blob/c57430a61eab62e88372f386c75989dab6332608/java/com/android/voicemail/permissions.xml
Disclaimer: I do not know if i have/not have been targeted for special operations.
Could have been anyone who is able to send VMM Control Messages in some way to my Handset. As i read the Specification, OMPLs VMM is probably able to send "Infotainment" Messages through SS7.
Before i read all of that, i found this log: (I definitely not had 13 Voicemail/Mailbox calls on 8-17)
(com.android.dialer does not write that log at all - at least i dont know where to cat that)
cat /data/data/com.google.android.dialer/cache/persistent_log/plain_text/68
I found especially interesting the "package replaced" messages.
The text was updated successfully, but these errors were encountered: