Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > misc.phone.mobile.iphone > #92834

Re: How to check validity of suspicious looking SMS message text URL?

Cross-posted to 3 groups.

Show all headers | View raw

On Thu, 22 Sep 2016 23:27:28 -0400, JF Mezei wrote:

> Note: the payload may end in .jpg or .png in the URL, but it does not
> mean that the server will serve that. It could have Content-type:
> application/octed-stream or somethint else and feed something that will
> cause a buffer overflow.

Just to be clear, the URL was *not* an image URL.
The "PNG" URL was merely the URL of the screenshot that I uploaded.

1. This is a screenshot I uploaded of the original message:
   http://i.cubeupload.com/k8CbNK.png

2. This is a screenshot when I clicked for more details:
   http://i.cubeupload.com/QD1o9F.png

3. And this is a screenshot of what T-Mobile said about it:
   http://i.cubeupload.com/tkSPkz.jpg

There should be no danger in viewing those screenshots.

> More importantly, clicking on that URL sends the spammer plenty of
> information about you because your mobile phone will send chockful of
> info in the HTTP request.
> 
> These URLs are often specific to your telephone number so they can then
> link your HTTP requyest to your phone number by using the request as a
> key to their database.

This is a good point in that nobody should click on the actual URL.
And that the actual URL may be specific to my particular phone number.
In which case, it gives the sender precise information about my phone.
(Although you may note I'm *always* on TOR and VPN concurrently on my phone
- so while the phone number is correct, the IP address will always be
incorrect.)

If others want to run TOR/VPN 100% of the time on the phone, it's easy. 
Just install "Orbot" 
https://play.google.com/store/apps/details?id=org.torproject.android

Note that Orbot has superceded Orfox:
https://play.google.com/store/apps/details?id=info.guardianproject.orfox

What Orfox gives you is TOR-on-Firefox (similar to the tor-browser-bundle
on computers); but what Orbot gives you is that, plus VPN (which is
basically Tor on everything).

Back to misc.phone.mobile.iphone | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 01:22 +0000
  Re: How to check validity of suspicious looking SMS message text URL? Melzzzzz <Melzzzzz@zzzzz.com> - 2016-09-23 01:25 +0000
  Re: How to check validity of suspicious looking SMS message text URL? nospam <nospam@nospam.invalid> - 2016-09-22 21:39 -0400
    Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 03:32 +0000
  Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 01:48 +0000
  Re: How to check validity of suspicious looking SMS message text URL? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-09-23 02:21 +0000
    Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 03:29 +0000
  Re: How to check validity of suspicious looking SMS message text URL? Snit <usenet@gallopinginsanity.com> - 2016-09-22 19:38 -0700
    Re: How to check validity of suspicious looking SMS message text URL? Snit <usenet@gallopinginsanity.com> - 2016-09-22 19:58 -0700
    Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 03:19 +0000
      Re: How to check validity of suspicious looking SMS message text URL? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2016-09-22 23:27 -0400
        Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 03:47 +0000
      Re: How to check validity of suspicious looking SMS message text URL? Snit <usenet@gallopinginsanity.com> - 2016-09-22 20:46 -0700
      Re: How to check validity of suspicious looking SMS message text URL? Eef Hartman <E.J.M.Hartman@gmail.com> - 2016-09-23 04:05 +0000
        Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 11:45 +0000
          Re: How to check validity of suspicious looking SMS message text URL? Eef Hartman <E.J.M.Hartman@gmail.com> - 2016-09-23 13:11 +0000
            Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 16:08 +0000
          Re: How to check validity of suspicious looking SMS message text URL? tlvp <mPiOsUcB.EtLlLvEp@att.net> - 2016-09-24 01:35 -0400
            Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-24 15:34 +0000
              Re: How to check validity of suspicious looking SMS message text URL? tlvp <mPiOsUcB.EtLlLvEp@att.net> - 2016-09-24 18:19 -0400
      Re: How to check validity of suspicious looking SMS message text URL? tlvp <mPiOsUcB.EtLlLvEp@att.net> - 2016-09-23 00:42 -0400
        Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 11:44 +0000
      Re: How to check validity of suspicious looking SMS message text URL? Andreas Rutishauser <andreas@macandreas.ch> - 2016-09-23 06:56 +0200
        Re: How to check validity of suspicious looking SMS message text URL? Snit <usenet@gallopinginsanity.com> - 2016-09-22 22:38 -0700
          Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 12:34 +0000
            Re: How to check validity of suspicious looking SMS message text URL? Snit <usenet@gallopinginsanity.com> - 2016-09-23 10:05 -0700
  Re: How to check validity of suspicious looking SMS message text URL? "Rod Speed" <rod.speed.aaa@gmail.com> - 2016-09-23 13:32 +1000
    Re: How to check validity of suspicious looking SMS message text URL? tlvp <mPiOsUcB.EtLlLvEp@att.net> - 2016-09-23 00:48 -0400
      Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 12:33 +0000
        Re: How to check validity of suspicious looking SMS message text URL? "Rod Speed" <rod.speed.aaa@gmail.com> - 2016-09-24 05:07 +1000
          Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 22:38 +0000
            Re: How to check validity of suspicious looking SMS message text URL? "Rod Speed" <rod.speed.aaa@gmail.com> - 2016-09-24 15:56 +1000
    Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 12:33 +0000
      Re: How to check validity of suspicious looking SMS message text URL? "Rod Speed" <rod.speed.aaa@gmail.com> - 2016-09-24 05:24 +1000
  Re: How to check validity of suspicious looking SMS message text URL? tlvp <mPiOsUcB.EtLlLvEp@att.net> - 2016-09-23 00:34 -0400
    Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 12:42 +0000
  Re: How to check validity of suspicious looking SMS message text URL? Arno Welzel <usenet@arnowelzel.de> - 2016-09-23 08:26 +0200
    Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 12:33 +0000
      Re: How to check validity of suspicious looking SMS message text URL? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2016-09-23 14:39 -0400
  Re: How to check validity of suspicious looking SMS message text URL? Whiskers <catwheezel@operamail.com> - 2016-09-23 10:07 +0100
    Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 12:33 +0000
    Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 12:36 +0000
  Re: How to check validity of suspicious looking SMS message text URL? Horace Algiers <horace@horacealgiers.com> - 2016-09-23 16:08 +0000
  Re: How to check validity of suspicious looking SMS message text URL? Chris <ithinkiam@gmail.com> - 2016-09-23 17:03 +0000

csiph-web