pen-test
[Top] [All Lists]

Re: listening to people/offices when on-hold on the phone

To: PenTest <pen-test@securityfocus.com>
Subject: Re: listening to people/offices when on-hold on the phone
From: Joel Eusebio <joele@telus.net>
Date: Fri, 22 Jun 2007 11:16:35 -0700
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <2cf3b3170706220337n7922dc65l2240ca9101de0dac@mail.gmail.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <2cf3b3170706220337n7922dc65l2240ca9101de0dac@mail.gmail.com>
Resent-date: Fri, 22 Jun 2007 17:33:49 -0600 (MDT)
Resent-from: pen-test-return-1078484440@securityfocus.com
Resent-message-id: <20070622233349.60EB1237586@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
User-agent: Internet Messaging Program (IMP) 3.1-cvs
Good point. And what if you were on hold while calling from work? And suddenly 
your co-worker shouts out loud "is the password on this server still....." :)

cheers,

Joel



Quoting Robin Wood <dninja@gmail.com>:

> Hi
> Imagine the situation, you get a message to call someone, your call
> gets answered by an automated system which says there may be a few
> minutes wait and gives you the bad hold music. You hit the hands free
> button on the phone and get on with work while you wait for it to be
> answered.
> 
> Unless you mute the call, the person/system on the other end of the
> call could be listening in while pretending to be on hold and
> potentially hear all that is going on around you.
> 
> It is a random attack vector but it could allow an attacker to pick up
> all sorts of information. I thought about it while sitting on hold for
> over 30 mins trying to get through to my mobile phone support line
> last night. If they had been listening they would know what I had for
> dinner.
> 
> Anyone tried listening in like this? Anyone got any comments?
> 
> Robin
> 
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
> 
> Are you using SPI, Watchfire or WhiteHat?
> Consider getting clear vision with Cenzic
> See HOW Now with our 20/20 program!
> 
> http://www.cenzic.com/c/2020
> ------------------------------------------------------------------------
> 
> 



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>