[willjasen]

So just on accident, I discovered this by myself, but searching the web brings up articles that are years old, however, it seems as if the telecoms didn't pay attention.

Easy enough to do - just acquire a target on the Sprint network, caller ID spoof your number to there's and then call their number. Ta-da, you're in their voicemail. An upcoming HPR episode will discuss it.

Anyone have an idea as to why the some telecoms are still relying on the technique of only sending the phone number as authentication to voicemail access?

[livinded]

There are a number of others that still do this as well. It's been known for a long time.

[Colonel Panic]

No PIN authentication? Are they stupid?

Boy, am I glad I don't use Sprint.

[biosphear]

willjasen, on Sep 4 2008, 09:41 PM, said:

So just on accident, I discovered this by myself, but searching the web brings up articles that are years old, however, it seems as if the telecoms didn't pay attention.

Easy enough to do - just acquire a target on the Sprint network, caller ID spoof your number to there's and then call their number. Ta-da, you're in their voicemail. An upcoming HPR episode will discuss it.

Anyone have an idea as to why the some telecoms are still relying on the technique of only sending the phone number as authentication to voicemail access?

Ah. But what if they have a password (PIN) for their Voice Mail?
I have known this for a vary long time.
Yes on some Sprint accounts you can just Spoof you number as the person that you want to get into the Voice Mail, but most people I know (Maybe they just do this because they know me :D) have a password for their Voice Mail.

Now Just guess their password. It is simple enough.

So you were Right in saying you can get into peoples Voice Mail, but wrong in assuming it is that easy all the time.

Now you are going to get a lot of people asking how they can spoof their numbers.

biosphear

[Colonel Panic]

"There's this thing called Asterisk..."

[xof7]

You can do this with nearly every cell company. However, most providers have a feature that you can enable on your account to always require your pin # even while calling from your own phone.

[SwartMumba]

Intersting to know.
I have a sprint account and the first time I accessed my voice mail, it asked me set up a pin.
So you kind of have a pin by default.