<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Practical Issues in InfoSec &#187; Cell Phone</title>
	<atom:link href="http://www.dlstrom.com/tag/cell-phone/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.dlstrom.com</link>
	<description>... putting information security within reach of everyone!</description>
	<lastBuildDate>Tue, 20 Dec 2011 17:00:00 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Experiences with the Verizon Wireless Network Extender</title>
		<link>http://www.dlstrom.com/2010/02/02/experiences-with-the-verizon-wireless-network-extender/</link>
		<comments>http://www.dlstrom.com/2010/02/02/experiences-with-the-verizon-wireless-network-extender/#comments</comments>
		<pubDate>Tue, 02 Feb 2010 17:55:00 +0000</pubDate>
		<dc:creator>Dan Strom</dc:creator>
				<category><![CDATA[Disaster Recovery]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Cell Phone]]></category>
		<category><![CDATA[Femtocell]]></category>

		<guid isPermaLink="false">http://www.dlstrom.com/?p=296</guid>
		<description><![CDATA[It&#8217;s been over two weeks now since I installed a Verizon Wireless Network Extender at home. We can get a weak Verizon signal at our house, but it varies based upon where in the house the phone is. I wanted to have a way to reliably use my Verizon Wireless cell phones at home. That [...]]]></description>
			<content:encoded><![CDATA[<p></p><div class="socialize-in-content" style="float:right;"><div class="socialize-in-button socialize-in-button-right"><a href="http://twitter.com/share" class="twitter-share-button" data-url="http://www.dlstrom.com/2010/02/02/experiences-with-the-verizon-wireless-network-extender/" data-text="Experiences with the Verizon Wireless Network Extender" data-count="none" data-via="danstrom" data-related="danstrom"><!--Tweetter--></a></div><div class="socialize-in-button socialize-in-button-right"><iframe src="http://www.facebook.com/plugins/like.php?href=http://www.dlstrom.com/2010/02/02/experiences-with-the-verizon-wireless-network-extender/&amp;layout=standard&amp;show_faces=false&amp;width=50&amp;action=like&amp;font=arial&amp;colorscheme=light&amp;height=65" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:50px !important; height:65px;" allowTransparency="true"></iframe></div></div><p>It&#8217;s been over two weeks now since I installed a <a href="http://www.verizonwireless.com/b2c/store/accessory?action=gotoFemtocell">Verizon Wireless Network Extender</a> at home. We can get a weak Verizon signal at our house, but it varies based upon where in the house the phone is. I wanted to have a way to reliably use my Verizon Wireless cell phones at home. That is why I got the Network Extender.</p>
<p>As you can imagine, results have been mixed&#8230;</p>
<p>What is the Network Extender?</p>
<p>It is a small box that attaches to your broadband Internet connection and creates a small cell for your cell phone to connect to. When inside that cell, or &#8220;bubble&#8221; as I have seen it referred, your cell phone talks to this little box rather than trying to find a signal from a far-away tower. Your conversation is routed across your Internet connection to Verizon&#8217;s servers and then to to other party.</p>
<p>What do I like about the Network Extender?</p>
<ol>
<li>I like the idea of using broadband internet to allow cellular access in an area of weak cell phone signal.</li>
<li>Access to the Network Extender can be limited to only specified cell phone numbers.</li>
<li>A certain amount of management can be done on-line via the Verizon Wireless web site.</li>
<li>Our landline was out the past couple of days. With the Network Extender, we were still able to communicate with the outside world!</li>
</ol>
<p>What do I not like about the Network Extender?</p>
<ol>
<li>Following the published setup instructions did not work on my home network. I had to call tech support for more information. My connection t the Internet is very generic. They should include more information in the setup instructions.</li>
<li>I live in an area that was AllTel until last October. I couldn&#8217;t connect to the Network Extender with my cell phones, and so called Tech Support. Because of the migration from AllTel to Verizon, we have a hybrid PRL pushed out to our phones. The Tech Dude had to turn off the hybrid PRL, and then we had to do the *228, option 2 to get a Verizon-only PRL. (Of course, I had to take each phone to the one location in the house that get sufficient signal off of a Verizon tower in order to get the PRL update.) I&#8217;m still experimenting with my Moto Android to see if there is any impact on my reception and signal strength while out-and-about.</li>
<li>The cell phone needs to be within 15&#8242; of the Network Extender to latch onto the femtocell for incoming or outgoing calls. Then the phone can go further away. I haven&#8217;t quite figured out the patterns of when the femtocell is used, and when it is not.</li>
<li>I had to configure my home router (<a href="http://www.linksysbycisco.com/US/en/products/WRT610N">linksys wrt610n</a>) so that the Network Extender is the DMZ machine. This was one of the things that I needed to call tech support for. What if I had another machine using the DMZ configuration? How could I use both? The tech dude didn&#8217;t know what ports I needed to allow. I configured the wrt610n so that the Network Extender is the DMZ host.</li>
</ol>
<p>Being the inquisitive sort, I decided to put a hub on the network drop going to the Network Extender and fired up Wireshark. It appears that the Network Extender is using IPSec to connect to the Verizon servers. I wonder if they are using VoIP protocols encapsulated in IPSec, or not&#8230; </p>
<p>I am thinking about sniffing the traffic for a bit longer and then removing the Network Extender from the DMZ and putting it back on the internal network. I will update this post if I try this.</p>
<p>- Dan</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dlstrom.com/2010/02/02/experiences-with-the-verizon-wireless-network-extender/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>No-effort Hacking</title>
		<link>http://www.dlstrom.com/2009/06/29/no-effort-hacking/</link>
		<comments>http://www.dlstrom.com/2009/06/29/no-effort-hacking/#comments</comments>
		<pubDate>Mon, 29 Jun 2009 17:33:59 +0000</pubDate>
		<dc:creator>Dan Strom</dc:creator>
				<category><![CDATA[Awareness]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Cell Phone]]></category>
		<category><![CDATA[Personal]]></category>

		<guid isPermaLink="false">http://www.dlstrom.com/2009/06/29/no-effort-hacking/</guid>
		<description><![CDATA[You can learn alot by watching people. I had breakfast this morning and was stunned to overhear someone on their cell phone give the administrative login credentials for the company website to someone else. They also very carefully spelled out the entire URL to the login page. If I were not trustworthy, I could log [...]]]></description>
			<content:encoded><![CDATA[<p></p><div class="socialize-in-content" style="float:right;"><div class="socialize-in-button socialize-in-button-right"><a href="http://twitter.com/share" class="twitter-share-button" data-url="http://www.dlstrom.com/2009/06/29/no-effort-hacking/" data-text="No-effort Hacking" data-count="none" data-via="danstrom" data-related="danstrom"><!--Tweetter--></a></div><div class="socialize-in-button socialize-in-button-right"><iframe src="http://www.facebook.com/plugins/like.php?href=http://www.dlstrom.com/2009/06/29/no-effort-hacking/&amp;layout=standard&amp;show_faces=false&amp;width=50&amp;action=like&amp;font=arial&amp;colorscheme=light&amp;height=65" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:50px !important; height:65px;" allowTransparency="true"></iframe></div></div><p>You can learn alot by watching people. </p>
<p>I had breakfast this morning and was stunned to overhear someone on their cell phone give the administrative login credentials for the company website to someone else. They also very carefully spelled out the entire URL to the login page.</p>
<p>If I were not trustworthy, I could log into their website and cause havoc. </p>
<p>What&#8217;s the moral to this story? You never know who is listening to your conversations. Be careful what you share, and with whom you are sharing. </p>
<p>Let&#8217;s keep quiet with confidential information&#8230;</p>
<p>- Dan</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dlstrom.com/2009/06/29/no-effort-hacking/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>InfoSec Tip: Protect your cell phone</title>
		<link>http://www.dlstrom.com/2009/05/21/infosec-tip-protect-your-cell-phone/</link>
		<comments>http://www.dlstrom.com/2009/05/21/infosec-tip-protect-your-cell-phone/#comments</comments>
		<pubDate>Thu, 21 May 2009 14:29:00 +0000</pubDate>
		<dc:creator>Dan Strom</dc:creator>
				<category><![CDATA[Awareness]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[BlackBerry]]></category>
		<category><![CDATA[Cell Phone]]></category>
		<category><![CDATA[iPhone]]></category>
		<category><![CDATA[Tips]]></category>
		<category><![CDATA[Windows Mobile]]></category>

		<guid isPermaLink="false">http://www.dlstrom.com/?p=234</guid>
		<description><![CDATA[Is your cell phone like mine? I have names and addresses of family, friends, co-workers and peers stored in mine. I also have my calendar on it. A Facebook app can be accessed and more information found. My ToDo list is stored on it. Other apps, such as OliveTree Bible Reader, Notes, Twitter all are [...]]]></description>
			<content:encoded><![CDATA[<p></p><div class="socialize-in-content" style="float:right;"><div class="socialize-in-button socialize-in-button-right"><a href="http://twitter.com/share" class="twitter-share-button" data-url="http://www.dlstrom.com/2009/05/21/infosec-tip-protect-your-cell-phone/" data-text="InfoSec Tip: Protect your cell phone" data-count="none" data-via="danstrom" data-related="danstrom"><!--Tweetter--></a></div><div class="socialize-in-button socialize-in-button-right"><iframe src="http://www.facebook.com/plugins/like.php?href=http://www.dlstrom.com/2009/05/21/infosec-tip-protect-your-cell-phone/&amp;layout=standard&amp;show_faces=false&amp;width=50&amp;action=like&amp;font=arial&amp;colorscheme=light&amp;height=65" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:50px !important; height:65px;" allowTransparency="true"></iframe></div></div><p>Is your cell phone like mine?</p>
<p>I have names and addresses of family, friends, co-workers and peers stored in mine. I also have my calendar on it. A Facebook app can be accessed and more information found. My ToDo list is stored on it. Other apps, such as OliveTree Bible Reader, Notes, Twitter all are on there too.</p>
<p>Amazing things can be learned about me from the information and applications that are on my cell phone.</p>
<p>Regardless of your role in life &#8211; staff or management, plumber or professor, pastor or teacher &#8211; your cell phone contains information about you and your life.</p>
<p>If the phone is lost or stolen, all that information is then available for whomever finds it. So, what&#8217;s a guy to do?</p>
<ol>
<li>
If your phone has <strong>remote wipe</strong> capabilities, make sure that you know how to use it. Windows Mobile, BlackBerry and iPhone all have the capability of remote wipes. If your phone is lost or stolen, use remote wipe to reset your phone.</li>
<li>
If your phone has the ability to <strong>lock</strong>, use it. Often this takes the form of a passcode that must be entered before the main screen is displayed. The iPhone and Windows Mobile phones have this ability built-in.</li>
<li>
Take special <strong>care</strong> when traveling. I&#8217;ve been in airports and seen cell phones left behind by hurried travelers. Several years ago, we had an employees leave his smartphone in a taxi. He had been in a hurry to make a meeting and wasn&#8217;t paying attention.</li>
</ol>
<p>What things can be learned or inferred about you and your organization just from the information on your cell phone? Protect it!</p>
<p>- Dan</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dlstrom.com/2009/05/21/infosec-tip-protect-your-cell-phone/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

