Slashdot Mirror
Japanese I-Mode Phones Under Attack
radsoft.net is reporting that DoCoMo phones arre under attack by new wormish i-mode attachments. According to the announcement, i-mode phone users shouldn't open emails from unknown senders. I used a docomo phone while I was in Japan a few weeks ago. They are so far ahead of us in phones: lighter, cooler, longer battery life, more features, and i-mode is cool. Anyway, the funny part is that these attachments, if opened, will do nifty things like call arbitrary phone numbers (your worst enemy? Emergency?) or simply freeze your phone. Docomo has market penetration that makes local cel phone mega corps look like mom and pop shops. Anyway, there's no doubt that consumer electronics will be targets of more attacks in the future.
That's a bad analogy. The reason that NTT are in the position of market dominance that they now enjoy is because they were a government-sanctioned monopoly. You literally could not compete with NTT, if you did, you would eventually be arrested. The law stated that NTT were the only people permitted to run a telco, and that was that.
Say what you like about Microsoft, but they achieved market dominance by competing in a free market. Linux is a viable alternative for many applications, you are free to distribute and use it as you please. Neither Microsoft nor the government are in any way able to enforce that you do otherwise - in fact there's this little thing called the Constitution that protects you.
So, really, the situation isn't similar at all.
The reason Japanese phones are smaller, lighter, and have longer battery life than American equivalents is because the cell size is much smaller.
Optimal cell size is a function of population density. In the Tokyo area, you've got about a billion people per square foot, so you can afford to keep the cell size small, which means you don't need a lot of power to transmit.
If you were to try to use the same cell size in a place like Texas, you'd be putting up more cell towers than there are people. It's just not economically feasable to do that.
Americans want phones they can take anywhere in the country and have them work. They need a big battery and a high power transmitter to make that work.
Here in the building where I work in Ibaraki-prefecture there's almost no cell coverage because we're a government lab (KEK) and you can't place a cell tower on government property according to Japanese law. People have to run to the roof whenever their cell phone rings. The lab isn't that big, either. It' can't me much more than a couple of square kilometers. Once you get off the lab, your phone works pretty much everywhere.
Don't expect to see Japan-sized phones in the U.S. any time soon. We need a ten-fold increase in population density before it will become practical.
The answer is as obvious as the answer to email worms: my (telephone|MUA) should not even *try* to be a public compute server, which is exactly what the ability to send "active" attachments means. Just Say No to active messaging. The cool factor simply doesn't outweigh the potential cost.
I was reading iMode's html-ish spec tonight and I saw the URL designation tel:// (as in tel://911)
What a bad iDea *that* is... (Yes, it's already been exploited, though over here, I think it's 119, rather than 911...)
Someone made an innocent goof in a HTML-based game a few weeks ago that highlighted this vulnerability.
On top of that, it costs the *initiator* of the call for calls placed from cell phones here, not the recipient - what was that exchange in the Carribean that was supposed to be so bad - 809?
iMode is just untroducing Java on its phones, but from what i've read on the keitai-l listserve, auto-dialing like this is not on an option.
Cheers,
Jim in Tokyo
MMDC.NET
-- My Weblog.
I think the worst part of this could be that the virus may cause the phones to automatically dial an emergency number.
Extra calls to emergency call centers that flood the lines is going beyond just filling inboxes. Although I'm not familiar with the "110" emergency number stated in the article, if it's anything like 911, it could obviously affect lives. This seems to me to be far worse than a worm that calls numbers at random or freezes up the screen of a phone (also mentioned in the article).
Image the suprise as during the middle of an important business meeting, your cell phone switches to speakerphone and calls THE DUNGEON.
1-800-800-8900
FOR MEN WHO ARE SERIOUS ABOUT LEATHER AND THE FETISH LIFE STYLE
Are you telling me that I can blame the messages that I leave on my ex-girlfriend's answering machine in a drunken stupor on a virus. Woo hoo. Gotta go make a phone call....
I couldn't fail to disagree with you any less.
I hear they're 'r33t'
"911, what's your emergency?"
"Please, you have to help us. My husband was just driving the car, when he passed out. I got the car stopped, but he's not breathing!"
"Ma'am, can you perform CPR on your husband?"
"I think so..."
"Okay, my computer can't tell where your cellphone is located, so I need you to tell me where you are so I can dispatch an ambulance."
"I'm on InterstaHAHAHA. Y04 F0n 4@s b33n H4XX0red! I AM L33t!!!"
The next Slashdot story will be ready soon, but subscribers can beat the rush and slashdot the links early!
Lately I have had reason to be working with some DoCoMo information and it is scary. These phones track what you look at on-line, everything you buy and, with their nifty new multiple cell base triangulation automation, they keep track of where you are when you use your phone to surf or buy something.
And, unlike most annoying tracking and information compilation efforts we are subjected to constantly, this one is directly linked to you personally, not just to a demographic segment. DoCoMo keeps all of your personal information combined with your demographics in the sections of their server system called D-MAX and U-MAX.
DoCoMo touts all this as the birth of true one to one marketing and says that part of the beauty of this is that a great deal of information can be collected without the users knowledge.
They might be light years ahead of us in cell phone technology, but they are also light years ahead of us in marketing driven privacy invasion. And it is only going to get worse with the next generation of IMT-2000 phones, some of which will have GPS to nail down your location even further.
And for those who aren't aware, which I imagine is damned few in this venue, the underlying technology in the i502 series on is Java. This allows lots of cool stuff to be downloaded into your phone, but I guess they haven't worked out all the security kinks yet. Too bad to hear about that, since warts and all I like Java.
7. What we cannot speak about we must pass over in silence.
I remember when kids would make prank calls to random numbers in the telephone book. But that's old fashioned now. Now, you make a virus that makes prank calls to random numbers in the telephone book.
This is called progress. =P