Faraday containers found unsafe

Faraday containers found unsafe

A report that focuses on the results, following conducted practical tests, on the reliability of mobile phone shielding devices (eg 'faraday' containers) found the device shielding failed in a number of instances that the author of the report placed under test and did not prevent RF signalling reaching the test mobile phones inside the containers, the findings in this recently published paper suggests:

https://www.cerias.purdue.edu/assets/pdf/bibtex_archive/2010-27.pdf

The implications might require that an 'impact assessment' on evidence that is seized and placed in shielding devices at the scene of a crime and transported from Police Station to Police Station etc may need to be 'reconducted'. The findings in the report raise the notion whether published Guidelines advocating the use of shielding devices may now need to identify exactly the tests and research considered prior to adopting published policy on the use of shielding devices, although it is unclear at present whether that will happen at all.

Whilst the report dealt primarily with external factors (radio communications) and how the shielding devices  coped with them, it also includes some other influences shielding devices can have on touch screen mobile phones, for example.

There have previously been mixed reviews about shielding devices and their impact on seized evidence that is left switched ON within shielding containers:

http://www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=3914
http://www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=4277&postdays=0&postorder=asc&start=0 

If a mobile phone is already OFF, or is switched OFF at the point of seizure, then such shielding devices shouldn't be necessary at that particular juncture.

Easter Remembered

Easter Remembered

I thought I would post this as in the news this Easter period it has been suggested Christian beliefs are declining. This may be so, or it might not be so. Britain has had to absurb some huge changes of the last two decades, cultural and otherwise, with little or no time to stop and pores for thought and to understand what those changes actually meant and mean.

I am not so sure that Christian belief is declining or any other faith-belief for that matter. Merely people are walking away from confrontation where religious beliefs, that are deeply personal to each of us, are used daily as political or scaremongering ends of some sort or other. 

This poem was given to me at Easter when I was sixteen. I enjoy the poem as I like the connotation the name 'Abou Ben Adams' brings. For it seems not to matter if the person is black, white, brown, yellow..., christian, muslim or jew...., and so on. All these matters are set aside to express a personal wish, a desire, a belief. As Easter is the time to remember in the Christian calender this poem reflects many of the doctrines set out in the tenets of the Christian faith. It may also be reflected in the tenets of many other faith-beliefs, too.  


============================
Abou Ben Adam, may his tribe increase,
Awoke one night from a sweet dream of peace,
And saw within the moonlight in his room,
Painting it rich, like a lilly in bloom
An Angel wirting in a book of gold.
Exceeding peace had made Ben Adam bold,
And to the presence in the room he asked,
"What writeth thou", the vision raid its head,
 And with a look made of all sweet accord, replied,
"The names of those who love the Lord".
"And is mine one" said Abou?
"Ney no so replied" the Angel.
Abou spoke more low, but cheerily still and said,
"I pray thee then, write me as one who loves his fellow men".
The Angel wrote and vanished.
The next night it came again with a great wakening light
And showed teh names of those whom love of God had blessed
And lo, Ben Adams name led all the rest.
=============================

http://trewmte.blogspot.com/2009/02/god-is-wireless-scientist-too.html

I trust everyone had a great St George's Day, yesterday, 23rd April 2011
http://trewmte.blogspot.com/2010/04/st-georges-day-23rd-april.html

MTEB - International Mobile Forensics Conference 2011

MTEB - International Mobile Forensics Conference 2011

2011 International Conference presentations and workshops:

- Session 1 The Impact of Mobile Cybercrime

- Session 2 iPhone, Android, Microkia, Blackberry et al

- Session 3 New crimes require new mobile examination methods

- Session 4 Forensic Mobile SSD FTL & Chip Off

- Session 5 Imaging and Data Carving

- Session 6 Indepth with SIM & USIM Examination

- Session 7 Achieving Laboratory Accreditation

- Session 8 Forensic Tools - Performance & Evaluation
- Session 9 Security and deleted data on mobile devices 
- Session 10 Hacks, Cracks and Whacks
- Session 11 Cell Site Analysis
- Session 12 Forensic Mobile Computing Laptops to Pads & Tablets 
- Session 13 Employment and Market Trends
- Session 14 GSM/WCDMA/GPS Jammers and examination methodology
- Session 15 Call Record Analysis
- Session 16 Student Presentation 
- Session 17 Mobile Phone Programming
- Session 18 Wireless technology comparisons
- Session 19 Handset Examination
- Session 20 Wireless technology comparisons
- Session 21 An expert's view of mobile phone evidence
- Session 22 Retained Data: Handover Interface for the request and delivery of retained data 
- Session 23 Standards Review
- Session 24 UK perspective - the future of Law Enforcement's involvement in mobile forensics
- Session 25 A Practitioner's view of moble phone examination

There will be a good selection of speakers and presentations. Remember this is a learning conference and due to timings - speakers -v- workshops - the streams occur in some instances at the same time. It would be within your interest to book at least two people to attend the conference. One to listen to the Conference Speakers and the other to attend training workshops. Session presentations or workshops maybe subject to change. 

Passcode locked iPhone may still make calls

Passcode locked iPhone may still make calls

We have known for awhile that many users can answer calls on their bluetooth earpiece even though they have the phone keypad lock set to ON. Moreover, handsets like Samsung GT-S5600 with keypad lock ON that have a synchronised bluetooth earpiece can call the last number received (LNR) or the number of the last received text message by simply pushing the key on the earpiece. Even if the user isn't using bluetooth earpiece, many handsets (eg Nokia 6303) with a locked keypad can still allow the user to answer a ringing phone.  

If you have a passcode lock on your iPhone it is possible, where the owner haven't yet changed the voice default security setting from when it was purchased, to still be able to make phone calls or worst still it can allow a thief (if your iPhone is stolen) to make calls with the handset. By switching the default setting to OFF can help prevent this occur. 

The image courtesy of The Register

The passcode lock vulnerability has been reaffirmed in a recent article published at the technology website, The Register: http://www.theregister.co.uk/2011/03/04/iphone_voice_dialling/.

Cell Phone Use May Have Effect On Brain Activity

Cell Phone Use May Have Effect On Brain Activity, But Health Consequences Unknown

February 28, 2011

In a preliminary study, researchers found that 50-minute cell phone use was associated with increased brain glucose metabolism (a marker of brain activity) in the region closest to the phone antenna, but the finding is of unknown clinical significance, according to a study in the February 23 issue of JAMA.

"The dramatic worldwide increase in use of cellular telephones has prompted concerns regarding potential harmful effects of exposure to radiofrequency-modulated electromagnetic fields (RF-EMFs). Of particular concern has been the potential carcinogenic effects from the RF-EMF emissions of cell phones. However, epidemiologic studies of the association between cell phone use and prevalence of brain tumors have been inconsistent (some, but not all, studies showed increased risk), and the issue remains unresolved," according to background information in the article. The authors add that studies performed in humans to investigate the effects of RF-EMF exposures from cell phones have yielded variable results, highlighting the need for studies to document whether RF-EMFs from cell phone use affects brain function in humans.


Nora D. Volkow, M.D., of the National Institutes of Health, Bethesda, Md., and colleagues conducted a study to assess if cell phone exposure affected regional activity in the human brain. The randomized study, conducted between January 1 and December 31, 2009, included 47 participants. Cell phones were placed on the left and right ears and brain imaging was performed with positron emission tomography (PET) with (18F)fluorodeoxyglucose injection, used to measure brain glucose metabolism twice, once with the right cell phone activated (sound muted) for 50 minutes ("on" condition) and once with both cell phones deactivated ("off" condition). Analysis was conducted to verify the association of metabolism and estimated amplitude of radiofrequency-modulated electromagnetic waves emitted by the cell phone. The PET scans were compared to assess the effect of cell phone use on brain glucose metabolism.


The researchers found that whole-brain metabolism did not differ between the on and off conditions. However, there were significant regional effects. Metabolism in the brain region closest to the antenna (orbitofrontal cortex and temporal pole) was significantly higher (approximately 7 percent) for cell phone on than for cell phone off conditions. "The increases were significantly correlated with the estimated electromagnetic field amplitudes both for absolute metabolism and normalized metabolism," the authors write. "This indicates that the regions expected to have the greater absorption of RF-EMFs from the cell phone exposure were the ones that showed the larger increases in glucose metabolism."

"These results provide evidence that the human brain is sensitive to the effects of RF-EMFs from acute cell phone exposures," the researchers write. They add that the mechanisms by which RF-EMFs could affect brain glucose metabolism are unclear.

"Concern has been raised by the possibility that RF-EMFs emitted by cell phones may induce brain cancer. ... Results of this study provide evidence that acute cell phone exposure affects brain metabolic activity. However, these results provide no information as to their relevance regarding potential carcinogenic effects (or lack of such effects) from chronic cell phone use."

"Further studies are needed to assess if these effects could have potential long-term harmful consequences," the authors conclude. (JAMA 2011;305[8]:808-814. Available pre-embargo to the media at www.jamamedia.org)

Cell Phone Radiofrequency Radiation Exposure and Brain Glucose Metabolism
The results of this study add information about the possible effects of radiofrequency emissions from wireless phones on brain activity, write Henry Lai, Ph.D., of the University of Washington, Seattle, and Lennart Hardell, M.D., Ph.D., of University Hospital, Orebro, Sweden, in an accompanying editorial.

"Although the biological significance, if any, of increased glucose metabolism from acute cell phone exposure is unknown, the results warrant further investigation. An important question is whether glucose metabolism in the brain would be chronically increased from regular use of a wireless phone with higher radiofrequency energy than those used in the current study. Potential acute and chronic health effects need to be clarified. Much has to be done to further investigate and understand these effects."


The editorial authors also question whether the findings of Volkow et al may be a marker of other alterations in brain function from radiofrequency emissions, such as neurotransmitter and neurochemical activities? "If so, this might have effects on other organs, leading to unwanted physiological responses. Further studies on biomarkers of functional brain changes from exposure to radiofrequency radiation are definitely warranted."

SOURCE: American Medical Association 

Previous discussions about Mobile Phones and Health:
http://trewmte.blogspot.com/2009/09/cellphones-cause-brain-tumors.html

What comparisons between Taser and Stun Gun Mobile Phones?

What comparisons between Taser and Stun Gun Mobile Phones?

There is an interesting video released out on BLUtube about the potential understanding of a forensic component occurring within the use of Taser. The component relates to Taser discharge, as opposed to the actual result impacting on the target-human body.

BLUtube is powered by PoliceOne.com
The observations in the video nonetheless are only one dimension of the 'stun' story and, whilst useful, it would be interesting to see whether MSc/PhD students (always looking for dissertation ideas) would conclude similar forensic components exists when it comes to mobile phones that have stun capability?:

http://trewmte.blogspot.com/2007/10/another-mobile-telephone-stun-gun.html
http://trewmte.blogspot.com/2007/07/stun-gun-cellphone.html

Mobile Phone Chip Off

Mobile Phone Chip Off

If you have produced or know of a mobile phone chip off video showing methods and techniques for removing ICs/memory from various makes/models of mobile handsets then email (trewmte@gmail.com) your youtube link and then it can be added to the thread 'Mobile Phone Chip Off'.



UPDATED:

Thank you Paul for this N70 video


Nathan, thanks for the SonyEricsson W850 video


Another SE W850 video


Nokia UEM removal

Mobile Device Tech-Genetics

Mobile Device Tech-Genetics

I assume mobile phone examinations will start to see the introduction of mobile devices with human thumbs connected to them being brought into the Lab. Testing the thumbs for evidence wont be a problem. DNA and fingerprinting is common for mobile devices and their associated SIM/USIM/Memory Cards. But just how TFK (Trew Forensic Kit), Oxygen Forensics, Cellebrite, XRY, MobilEdit etc will cope with the thumbs, which provides the interface to the device, is another matter. Perhaps this requires developing some type of tech-generic ears that act as couplers/data interface in which to stick those thumbs, no!?
 
Future possibilities of video streaming data straight to the brain could also be offered, too. A commercial service of 100 megeBytes download at £16.50 a month, may be? I can visualise the advertisement: 'We make worthwhile products, even better. The Trewly best ideas are why Trew are the market innovator and leader.' Well, why not, everyone else says it.....

.....anyone got the number for the Stock Exchange?

The video, by the way, is courtesy of Sony Ericsson Xperia Play commercial available on YouTube.

GSM Radio DNA Bracelet

GSM Radio DNA Bracelet

We may wish to consider what might be forensically deduced from radio test measurements when conducting cell site analysis (CSA). CSA, as we know, in the majority of circumstances in which it may be deployed, takes account of historical perspectives of radio coverage in a particular geographical location after mobile communications have occurred. It does not automatically follow the precise area in which radio tests are conducted is identical to the precise area in which mobile calls took place. The results obtained from such tests are usually aligned and suggested to correspond to mobile communications usage on a particular subscriber account using data from call data record (CDR) details. The combined details of both may be presented, usually in a report and/or oral evidence, in legal proceedings.

Understanding the radio test measurement results requires at first instance knowing the technical identity, structure and content employed in the cycled (eg TDMA) frames containing overhead paramaters (control channel data) that a mobile phone may receive, decode, action commands and receive responses. In this discussion content associated with traffic channel data (voice communication. SMS, email, etc) is not dealt with due to the historical examination of control channel data arising from radio tests and assessment of coverage in an area obtained after the event of mobile communications.

As examiners will be using radio test equipment to collect radio information, the GSM heirachial frames (see below) displays the structure of the entire cycling processing designed for GSM. Essentially, examiners need to know the heirachial structure in order to identify where in the structure control data captured by the radio test equipment logically originates. The first point to note, since it is control channel data that is relevant, is that there are 51 TDMA frames set aside for the transportation of control channel signalling, albeit the control channel data can be duplicated over numerous frames.   

 

Analysis of the heirachial frames reveals that only a proportion of the frames are actually considered relevant to cell site analysis as the frames being monitored in the demesne are real time over the air interface at the time of conducting radio tests subject to the quantifying period an examiner remains at site conducting tests at a particular location. For instance, rarely, if ever, is it found an examiner stays at one location monitoring for 3.30hrs to allow for the entire GSM heirachial frames to complete their cycle (as set down by the GSM standards) because it is simply not practicable or relevant to do so. Instead, an examiner needs to know which control channels are available and the likelihood of signalling data being communicated within each control channel.

I shall deal with types of bursts and timing of frames in a later discussion. For now, it is perhaps useful to think about when examiners goes to site for testing that radio signals travel over the air in mico-seconds, the radio receiver (handset) detects the signals in milli-seconds and the entire decoding process occurs approximately in seconds and thereafter, at which point, the examiner may then be able to begin comprehending the resulting output of the processed data. It is the comprehension of data that significantly examiners needs to understand which control channel/s such data may be attributable (eg. for BCCH  - the examiner may expect to determine paramaters relating to cell specific data).

It is precisely the nature of control channels in the assigned frames that contains signalling data being constantly cycled at high speed in order to contact, connect and retain network communication with the radio receiver (handset) in order that the handset can process, understand, respond, where necessary. The range of control channels are defined by GSM and repetituously cycling of the control channels that led to identifying the GSM Radio DNA Bracelet, illustrated below. 

I shall stop here because there is a considerable body of information that I have condensed into this byte-size primer discussion. Readers may wish to take time to digest what I have stated. Also, I am in no hurry discuss everything. What I can state, I rely on evidence, analysis and facts drawn from standards and test results, each used to corroborate each other.  Over the years I have had mobile network operator staff, experts and examiners who have suggested something different or initially disagreed with the GSM Radio DNA Bracelet only for them to reconsider their own view down the line. This has largely been due to radio engineers/experts/examiners thinking in terms of KPIs, fault finding, radio planning or not fully appreciating the subject matter being discussed. The findings I am discussing: relate to forensic analysis and evidence; the findings have remained constant (in my opinion) over the years; control channel data used for CSA assigned only to those logical channels identified in the GSM Radio DNA Bracelet and no other logical channel. It is true to say operators may use various combinations of control channels (examples are set out in the GSM standards) but in each instant the control channels are constantly cycled in a pattern that forms a bracelet effect, the signalling data in them has unique identity properties analogous to the way DNA attributes can be understood. Objectively, if the aforementioned doesn't occur GSM handsets and SIM cards may not determine/understand control channel data to make effective use of the data and, logically, GSM would fail to work effectively with its claimed objecitives. It is because of these GSM constants that they fortify that a GSM Radio DNA Bracelet exists, subject to the caveat control channels used by particular operators at particular locations might vary.

The work above is Copyright and the entire original artistic work or part thereof may not be reproduced or distributed without the prior consent of the author. (c) Gregory Smith 2011.

Apple sued over iPad and iPhone app 'data leaks'

Apple sued over iPad and iPhone app 'data leaks'

The BBC article doesn't mention it, but it would be helpful to know what personal data is being captured by web-based companies etc. In the wrong hands captured personal data for MSISDN could be used, by pinging from the internet, to cache polled MSISDNs for their IMSIs etc.  The equipment is out there to do it and has been for many years.

With credit card details being included within suggested secure apps for UICC cards, it is not difficult to imagine a rogue poll and de-tanking event occuring that goes unnoticed because it appears like the modern unobtrusive location updating procedure or another procedure and the user may only know about it after the data is missing.

Should that event happen it is what is termed as a "Mobile Cybercrime". The relevance being, making use of the singular term cybercrime as a title is highly misleading because you need a science and an operable technology in which the event needs to activate and commission. Mobile communications is a science and a technology (a damned fine science and technology they are, too).     

http://www.bbc.co.uk/news/technology-12089225

Tutorial Pt1 - Creating an Elementary File

Tutorial Pt1 - Creating an Elementary File

When examining ICC (SIM)/ UICC ((U)SIM) Cards data is commonly extracted and harvested from particular elemenary files (EFs) as specified in GSM11.11/3GPP 31.102. The particular EFs referred to are:

Transparent EF: an unformatted data field; containing a sequence of bytes that can be accessed individually or in variable length.

 

 Linear Fixed EF: Formatted data field with records that all have a constant length  

Cyclic EF:  Formated data field derived from a linear data field with constant length

 

From these EFs the data commonly acquired are identities and records such as IMSI, Phonebook, SMS, Location Information etc, to name but a few. The structure and type of content allocated to unformatted and formatted EFs  above, has remained fairly constant with ETSI, GSM and 3GPP standards.

Evidentially, of course, examiners are often focussed on merely obtaining the content of a particular EF with reliance placed entirely upon the SIM/USIM reading tool to process that objective. Due to limitation in applied attendance time (and whatever the causes might be for that) means the examiner rarely scratch the surface to comprehend the coding of the commands that are issued when selecting an EF etc (and the subject will be discussed in a later tutorial). However, prior to selecting an EF there is important information that needs to be known about how elementary files and their life cycles are created in the first place and their associated file templates. This tutorial therefore provides a brief looks at what is involved in creating an EF and some help hints for examiners relevant to forensics. 

Why would this be of interest to examiners? Without a created EF there would be no EF to select in the first plus thus ultimately no data to be extracted and harvested. Where examiners are dealing with illicit data couriers (the cybercrime paradigm, industrial espionage, terrorist data etc) these intelligent bandits are demonstrating that they are as competent to a degree that is can be said to be equal to or more advanced than examiners and naturally they to outwit and seek to hide information in elemetary files that avoids detection by standard evidence SIM/USIM reading tools.  So both these point represent reasons for examiners understanding how EFs are created and what can be revealed from knowing the templates and coding of the commands for that purpose.

It should be understood that technical advancements and technology evolution have not been without their impact on ICC/UICC and therefore when starting out it is important that examiners have awareness about the evolving standards that should be considered and effort that should be made to comprehend the instructions in them. The standard I have choosen for this tutorial is TS 102 222 Administrative Commands for telecommunication applications as this is the standard that defines creating EFs on ICC and for UICC, too.

Reference to ICC/UICC is intended to mean elementary files that are created etc on them and not the OS, physical or some logical aspects of ICC/UICC.  

To start with the two versions of the same standard for this discussion have been used and are identified below. I should point out there are over 26 different versions of this particular ETSI Standard.

TS 102 222 V3.0.0_60 May 2000 and TS 102 222 07.01.00_60 February 2007 

TS 102 222 V3.0.0_60 May 2000

 

 TS 102 222 07.01.00_60 February 2007

The first point to note is the inclusion of additional elements in the later version of the standard and the re-ordering of the template. This example will hopefully and immediately illustrate why SIM/USIM readers obtain different bits, nibbles and bytes in the hex string and content of SIMs/USIMs. Or said another way, the omission to extract and harvest data from SIMs/USIMs

The second point to be learned from the finding above should lead examiners to question: which adopted standard is the format of the EF recorded on the ICC/UICC under examination?  The only way you will know that is to identify the template to which the EF has been coded. Each brand name manufacturer has there own tools to obtain the coded template information but there are several application vendors out there that also produce third party software.

Prior to obtaining software examiners need to have some indication how template data can be illustratring for coding purposes, which shall be dealt with in the next tutorial.

Self Deleting Text Messages

Self Deleting Text Messages

How to send self deleting SMS according to a computer hacking website that reports "this technique is called SAFE-TEXT. It's a technique where a message destroys itself after being read."

Before proceeding further there are several matters worth mentioning.

Sent flash SMS text messages are not automatically saved and thus delete after opening and closing the message, irrespective of whether the receiving party actually peruses the content or not. It is a technical mechanism included in the technical realisation of GSM and WCDMA. A flash message is technically referred to as a Message Class: Class 0. For a further discussion of flash messages see: Disappearing Sms Text Messages

Fairly recently I wrote about automatic deletion of text message, An app that can be installed on certain mobile phones and attribute a timer to received messages set to the length of time the message can be stored.  That particular discussion though related to the fact of texts being stored inside the application and encrypted so would be outside of the scope to extract and harvest data by handset readers that generate evidence:  Mobile Telephone Evidence Newsletter MTE_Vol7_MTE02_2010

Another option for automatically deleting text messages and a common feature found on smart phones is 'validity period' (not to be confused with 'validity period' for transmission/reception of SMS text messages) where the smart phone user or controller of it sets a storage clear out time for saved text messages or a security policy is set or triggered deleting stored text messages.

In each of the cases above at no time is there any suggestion of something illegitmate occurring or the desire to generate something potentially illegal. Thus, full-circle, we return to SAFE-TEXT. Instead of the actual text being sent to the target user's handset and self deleting thereafter, the recipient is supplied with a mobile internet link and visiting the website clicks the message which can then disappear within seconds. It is not clear, because I haven't tested it out as I only learned of this matter yesterday, whether the web browsing cache in the handset caches the complete activity of the mobile viewed webpage, which may provide an option to replay the message. The full extent of anonymity with SAFE-TEXT is not clear either because a user must "register" for the service and "2. If you’re the sender, the message will show your name and number." No doubt we will learn of reports that will confirm if this is a menace service or not.

Spoofing Legislation

Spoofing Legislation

Called the "Truth in Caller ID Act of 2010" the legislation (HR 1258 Report No 111-461 / Union Calendar No 264)  amending the Communications Act 1934 makes it illegal in the US "to cause any caller ID service to transmit misleading or inaccurate caller ID information, with the intent to defraud or deceive."

Spoofing Legislation
http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=111_cong_bills&docid=f:h1258rh.txt.pdf

iPhone - Evidence Handset Reader Tools

iPhone - Evidence Handset Reader Tools

Two questions:

1) How many 'evidence' handset reader tools can you name off the top of your head?
2) And how many of those tools extract and harvest data from iPhones?

In answer to question one we know we can at least identify thirteen (13) tools and the answer to question two is also at least thirteen (13) tools. The answers can be found in 'iPhone Forensics White Paper' published by viaForensics. The authors of the document are Andrew Hoog and Katie Strzempka.

The number of tools now available and sold into the marketplace is a bit of surprise because in most cases a large portion of the forensic community do not own one copy of each of these tools as it is not strictly necessary. It is quite useful, though, to see a report like this that brings together at least 13 tools so that there is a record of the existent of these tools and how they are viewed in relation to their usefulness.

What I like about this report is that it is produced entirely independent of any of the handset reader software manufacturers and the authors/publishers were not compensated in any way for the work and effort that went to researching and testing each tool.  I should also point out that I am not being compensated in anyway either for mentioning the researchers/publishers or this White Paper.

I wont spoil the fun for you of reproducing the findings and results recorded in the White Paper, but you can read about them for yourself at the weblink below:

http://viaforensics.com/education/white-papers/iphone-forensics/

A Field of Remembrance

A Field of Remembrance

In the Christian religion, and I put my name down as one who believes, there is a poignant, moving verse in New Testament, St.John, 15:13:

"Greater love hath no man than this, that a man lay down his life for his friends"  

That testimony is the tribute we pay to all of the brave who were remembered at the Field of Remembrance in Wiltshire, yesterday.

The Wiltshire Times reported memorable coverage of yesterday's Service and Days Events. Their online contribution can be read at the link below:

http://www.wiltshiretimes.co.uk/news/3816788.A_field_of_remembrance/

Poppies and Heroes - get involved......

Each year I run the Poppies and Heroes reminder appeal. Those who lose their lives in service of our country, they are our boys and girls, sons and daughters, brothers and sisters, our family. Where we expect them to protect us, it is a small return of our duty to their families that when their lives are lost we remember, we share and we console so that their mothers and fathers know we stand with them, beside them, in their loss. 

http://trewmte.blogspot.com/2010/10/poppies-and-heroes.html

Do not send anything to me, but to know more, to commemorate or to contribute do contact two magnificent organisations 'The Poppy Appeal' and 'Help for Heroes'. Please use the links below: 

http://www.poppy.org.uk/

http://www.helpforheroes.org.uk/ 

Thanks.

Mobile Telephone Blogs Approved Access Only

Mobile Telephone Blogs Approved Access Only

I have endeavoured to be free with sharing knowledge and information over the years through my blogs, but given the changing economy, UK and global events and advancements in forensics the nature of the technical content, new developments and examination techniques and legal information will only be accessible to approved law enforcement personnel, security specialists and authorised individuals. The following blogs are now approved access only:

Cell Site Analysis
http://cellsiteanalysis.blogspot.com

Forensic examination and evidence from SIM an USIM
http://sim2usim.blogspot.com

Forensic examination and evidence from Mobile and Smart Phones  
http://forensicmobex.blogspot.com

Mobile Telephone Evidence (http://trewmte.blogspot.com) will of course remain an open.

UK Roaming Orange and T-Mobile

UK Roaming Orange and T-Mobile

I got a text message today (08/10/10) from Orange informing me "Now you can pick up a signal from both the Orange and T-Mobile networks....."Further information about this is available at the weblink below:

https://kareena.orange.co.uk/share/

Call and text in even more places

Now you can pick up a signal from both the Orange and T-Mobile networks in the UK which means that you can call and text in even more places.

• Your phone will use T-Mobile signal if it doesn't pick up an Orange signal
• Your charges stay the same when you use T-Mobile signal
• Nothing else will change, you'll just get more network coverage

There will be an impact on investigation and evidence. I have raised some additional observations in the discusssion " CSA and seamless roaming" at:

http://cellsiteanalysis.blogspot.com/2010/11/csa-and-seamless-roaming.html

CSA and seamless roaming

CSA and seamless roaming

UK seamless roaming on the H3G to O2 and H3G to Orange always added further dimensions needing to be investigated when conducting cell site analysis (CSA). However, with Orange's announcement today (08/10/10), sent by text message to its customers, will mean extending seamless roaming investigations now to Orange and T-Mobile too.

https://kareena.orange.co.uk/share/

Call and text in even more places

Now you can pick up a signal from both the Orange and T-Mobile networks in the UK which means that you can call and text in even more places.

• Your phone will use T-Mobile signal if it doesn't pick up an Orange signal
• Your charges stay the same when you use T-Mobile signal
• Nothing else will change, you'll just get more network coverage

This provides further corroboration that simplifying investigations and not spending the appropriate time conducting radio tests and cross-referencing to the appropriate network records can lead to erroneous findings and reported flawed opinions to the client and court.

ISO 17025 Toolkit

ISO 17025 Toolkit

Members at the Institute for Digital Forensics (IDF) Group at LinkedIn (http://www.linkedin.com/)  we are discussing the creation of an ISO 17025 Toolkit and assistance that might be offered by other QA standards.

You will need to be an approved but free to join participant of the Institute's IDF Group to gain access to the materials.

Cyberbullying Report

Cyberbullying Report

US analysis of the use of email, websites, Instant Messages, Twitter, Facebook and other online resources to torment, harass and/or embarrass other children – has become an increasingly common phenomenon in American schools. The emotional injuries – and the occasional suicides – attributed to cyberbullying have led some to call for making cyberbullying a crime in and of itself.

This article analyzes the arguments for and against creating a new, “cyberbullying” offense. It argues that existing criminal law can adequately address cyberbullying when the “harm” it inflicts rises to the level that warrants the use of criminal sanctions; it also argues that the residual instances of cyberbullying which do not qualify for the use of criminal liability are better addressed by other, non-criminal means.

http://papers.ssrn.com/sol3/Delivery.cfm/SSRN_ID1537873_code342087.pdf?abstractid=1537873&mirid=1

US Cases - Interpretation regarding seizure

US Cases - Interpretation regarding seizure

Two interesting US cases posted at Susan Brenner, Professor of Law, blog highlighting the complexity in interpretation regarding seizure, relevant to these cases were Blackberry devices.

http://cyb3rcrim3.blogspot.com/2010/10/blackberry-seized-unlawfully.html
http://cyb3rcrim3.blogspot.com/2010/10/blackberry-seized-lawfully.html

Quad-SIM (4 in 1)

Quad-SIM (4 in 1)

Wonder how we will handle the examination of this beast? Which profile will need to be read first? Will the handset have different profiles? Will each SIM have its own password?  There are so many question this news story raises. Previous experience has shown care is needed with handling the examination of handsets containing two (dual) SIMs (http://sim2usim.blogspot.com/2008/11/cloning-test-sim-cards.html).


Spreadtrum Announces the World’s First Single Chip Quad-SIM Standby Solution
The SC6600L6 allows four GSM SIM cards simultaneously running on standby mode with only one set of baseband and RF. It integrates a processor engine and controller for supporting quadruple SIM cards and has an improved graphic user interface for Quad-SIM. The product supports different multi-SIM options, including dual SIM, triple SIM, and Quad-SIM in a single set of baseband and RF chip, provides more choices to handset designers and meets need of users from different regions.

http://www.spreadtrum.com/eng/showNews.asp?name=1&ID=306

Smart Card Hacking

Smart Card Hacking

Back in 2002 I wrote about SIM Card Cloning for examiners to demonstrate the state of the market place, where software and hardware was being openly promoted that researchers could obtain and what might an examiner be exposed to when examining a cloned SIM Card. A copy of that report can be downloaded here:

SIM Card Cloning
http://www.4shared.com/document/GMz_Gqcc/Special_Edition_2002_SIM_Cloni.html

In 1998 I circulated  a report (UPD5-1 Vol1 - FEN98) on Smart Card Hacking to members of the British Association of Criminal Experts (BACE). The archive report has been scanned page by page and put into acrobat.pdf format and can now be downloaded here:


Smart Card Hacking
http://www.4shared.com/file/kq5NGzns/UPD5-1_Vol1_-_FEN98.html

The smart card hacking report has an interesting description for classification of the various levels of criminal activity in addition to techniques of smart card hacking. This particular report was the one that inspired me to write about SIM Card Cloning for exmainers. Once again thanks and respect to Ross Anderson and Markus Kuhn.

It is important to consult the laws of the country you are in when dealing with research for cloning SIM Cards. This blog article does not promote or advocate anyone to break the law by cloning or attempting to clone SIM cards for the purposes of obtaining services or breaching property rights belonging to respective particular network operators etc.

Location Update (LU) and Cell Site Analysis (CSA)

Location Update (LU) and Cell Site Analysis (CSA)

Heine, G; referred to the model "An MS performs LU on several occasions: every time it changes the location area, periodically, when a periodic location update is active, or with IMSI attach/ detach switched on at the time when it is subsequently turned on again."

That statement minimises, thus hides, a considerable body of mobile activity and, importantly, cell site analysis (CSA) suffers when students and practitioners fail to take into account the importance in the depth of knowledge and understanding that is needed to include the important facet of Location Update when conducting CSA. The following may assist students and practitioners with a simplified operational background as to events when Location Update (LU) takes place:

The MS requests a control channel from the BSC. The BTS decodes the CHAN_REQ, calculates the distance MS«BTS (timing advance), and forwards all this information to the BSC. Please note that the CHAN_REQ already indicates which service the MS requests (Location Update, in this case).

After the CHAN_RQD is received and processed, the BSC informs the BTS which channel type and channel number shall be reserved (CHAN_ACT).

The BTS confirms with a CHAN_ACT_ACK that it received and processed the CHAN_ACT.

The BSC sends the IMM_ASS_CMD, which activates the previously reserved channel. The BTS sends this information over an AGCH to the MS. The MS finds “its” IMM_ASS_CMD by means of the request reference, which is already contained in the CHAN_REQ.

Layer 2, the LAPDm connection is activated only now. The MS sends a SABM to the BTS, which (differently from LAPD) already contains data (LOC_UPD_REQ in this case).

The BTS confirms that a LAPDm connection was established by sending an UA message, which repeats the LOC_UPD_REQ.

The BTS passes LOC_UPD_REQ to the BSC. Although this is a transparent MM message, the BSC still processes the LOC_UPD_REQ in parts, because the BSC amongst others, requires the Mobile Station Classmark information. The BSC packs LOC_UPD_REQ, together with the current LAC, and CI into a CL3I message (Attention: the LOC_UPD_REQ from the MS contains the old LAC!) and then sends this within a SCCP CR
message to the MSC. The CR message carries not only the LOC_UPD_REQ to the MSC, but also requests establishment of an SCCP connection.

If the MSC is able to provide the requested SCCP connection,then the CR is answered with a CC. A logical connection from the MS to the MSC/VLR exists from this point in time on. The MSC/VLR answers the LOC_UPD_REQ with an AUTH_REQ This message is conveyed to the BSC via the established SCCP connection.

BSC and BTS transparently forward the AUTH_REQ to the MS. Most important content is the random number parameter (RAND). The MS (more precisely the SIM) calculates the result SRES by feeding RAND and Kj into the algorithm A3, then transparently sends SRES in an AUTH_RSP message to the MSC/VLR. The VLR compares SRES with the value provided by the HLR.

The MSC/VLR switches on ciphering, if the result from the authentication is correct. For this purpose, the MSC/VLR sends information to both, the MS and the BTS.

The BTS extracts its part form the ENCR_CMD message, which is Kc and sends the rest in a CIPH_MOD_CMD message to the MS. The CIPH_MOD_CMD message only contains the information, which cipher algorithm (A5/X) shall be used. The MS confirms, by sending a CIPH_MOD_COM message that ciphering was activated.

If Equipment Check is active, then the MSC/VLR requests the MS to provide its IMEI. This is done in an IDENT_REQ message, which is transparent for the BSS. Please note that the IDENT_REQ message also allows to request the TMSI or the IMSI. The equipment check may be performed at almost any time during the scenario, or in other words, is not tied to this place of the scenario.

The MS transparently transmits its IMEI in an IDENT_RSP message to the MSC/VLR, where it is checked by means of the EIR, whether that equipment is registered stolen or not approved.

The MSC/VLR assigns a TMSI, which is used instead of the IMSI in order to make tracking of subscribers more difficult. TMSI_REAL_CMD is also a transparent message between MSC/VLR and MS. The most important content of this message is the new TMSI. Please note that the assignment of a TMSI may also take place at the end within the LOC_UPD_ACC.

The MS confirms with a TMSI_REAL_COM that the new TMSI was received and stored. If the new TMSI is assigned with a LOC_UPD_ACC, then the TMSI_REAL_COM is obviously sent only after the LOC_UPD_ACC.

Sending of the transparent LOC_UPD_ACC message confirms that the MSC/VLR has stored the new Location Area (LAI). This concludes the Location Update process. The control channel that was occupied on the Air-interface has to be released, after the Location Update scenario has ended. For this purpose, the MSC sends the CLR_CMD message to the BSC. The BSC passes this command in a CHAN_REL to the BTS, which passes it to the MS. By sending a DEACT_SACCH, the BSC requests the BTS to cease sending of SACCH messages (SYS_INFO 5/6).The MS reacts on receiving a CHAN_REL message by sending a DISC (LAPDm).

This requests from the BTS to release its Layer 2 connection. The BTS confirms release of the Layer 2 connection by sending an UA message. Towards the BSC, the BTS confirms release of the Air-interface connection by sending of a REL_IND message. The BSC forwards this acknowledgment in a CLR_CMP to the MSC. The BSC requests the TRX in a RF_CHAN_REL to release the occupied resources on the Air-interface. RLSD requests release of the SCCP resources.

RF_CHAN_REL_ACK confirms release on the Air-interface. RLC confirms release of the SCCP resources.

Poppies and Heroes

Poppies and Heroes

.

Under one Flag

.

http://www.poppy.org.uk/

.

http://www.helpforheroes.org.uk/

Poppies and Heroes

Poppies and Heroes

.

Under one Flag

.

http://www.poppy.org.uk/

.

http://www.helpforheroes.org.uk/

Poppies and Heroes

Poppies and Heroes

.

Under one Flag

.

http://www.poppy.org.uk/

.

http://www.helpforheroes.org.uk/

Mobile Phones Carrying Warning Signs

Mobile Phones Carrying Warning Signs

Back in 1997 the journailist Michael Fleet wrote in the Daily Telegraph Tuesday May 6th about a report that I had written calling for mobile phones to carry warning signs informing users about the dangers of using a mobile phone whilst driving - copy of the newspaper article is here:

http://www.4shared.com/document/yGHb13t3/Mobile_Warning_Signs.html

At the time of my report it was made following the case of the first prosecuted case of death by reckless mansalughter caused by driving whilst the driver was using a mobile telephone in which I was the prosecution mobile telephone expert. The deceased injuries sustained from that RTA were horrific and therefore my call for warning signs on mobile phones had purpose.  As digital mobile communications was still a young, growing industry in the UK in 1997 my idea didn't find much favour because of the econimic and political climate back then.


I read an article in September 2010 titled "US official wants 'distracted driving' label on cell phones, reported by Karin Zeitvogel (AFP) – Sep 21, 2010" that in essence suggests a similar approach to the one I made 13 years earlier. The article is here:

US official wants 'distracted driving' label on cell phones:
http://www.google.com/hostednews/afp/article/ALeqM5ht1T9FoPDKuWpPlBLwMls3XI7ntQ

I wonder if as the person making the challenge this time around is a US government official (US Transportation Secretary Ray LaHood) raising the topic his idea will find favour or will the suggestion fall on deaf ears and not find favour?

Mobile Face Recognition Might Replace Password/PIN

Mobile Face Recognition Might Replace Password/PIN

One exciting aspect about forensic examination of mobile handsets is the constant exposure to innovation and change in the variety of handsets with which we are exposed, sometimes on a daily basis. Legality and privacy are two imposing factors when in comes to dealing with content on mobile phones and the right of access. Where PIN and/or Password is not revealed by the suspect, authority is needed to continue to gain access to a device in order to reveal content.

Passwords/PIN are commonly alpha-numeric digits and there are ways and methods of dealing with those. When Android introduced symbol based password options for their handsets, this feature added a new dimension an examiner had to cope with during the examination process.  Now there is a new development to deal with, created from an EU funded project, MOBIOproject. MOBIO stands for Mobile Biometry. More on this subject.........

http://forensicmobex.blogspot.com/2010/10/mobile-face-recognition-might-replace.html

Charlie Chaplin and the 1928 mystery mobile phone

Charlie Chaplin and the 1928 mystery mobile phone

Regular visitors to my webblog are already aware, however if you are a first time visitor you may care to know that I am not simply involved with forensics and evidence for over two decades but that I am also an active campaigner to bring to the fore and make revelation about the amazing world of mobile communications and the very poor promotion of its incredible historical roots, not just in scientific discovery but as an advanced technological communications masterpiece, also.

Here is another interesting piece of information that recently emerged, recorded in the Daily Mail online:
http://www.dailymail.co.uk/sciencetech/article-1324132/1928-Charlie-Chaplin-film-mobile-phone-time-travelling-mystery.html

Related article on mobile telephone historical developments:
http://trewmte.blogspot.com/2010/08/vision-of-mobile-phones-in-1976.html
http://trewmte.blogspot.com/2009/01/mobile-forensics-and-evidence-degrees.html
http://trewmte.blogspot.com/2010/01/victorian-texting.html

Four Blogs

Four Blogs

I have four open webblogs that are active:

http://trewmte.blogspot.com
http://cellsiteanalysis.blogspot.com
http://sim2usim.blogspot.com
http://forensicmobex.blogspot.com

The focus of these webblogs involves dealing with all forms of forensics and evidence relevant to mobile communications in the open arena that may impact now or in the future relevant to:

- Advancing forensic evidence and analysis by challenging methodology and entrenchment in out of date concepts
- Balanced technical evidence for fair trials

I have been developing new materials for the blogs that will be gradually rolled out over the next six months.

Four Blogs

Four Blogs

I have four open webblogs that are active:

http://trewmte.blogspot.com
http://cellsiteanalysis.blogspot.com
http://sim2usim.blogspot.com
http://forensicmobex.blogspot.com

The focus of these webblogs involves dealing with all forms of forensics and evidence relevant to mobile communications in the open arena that may impact now or in the future relevant to:

- Advancing forensic evidence and analysis by challenging methodology and entrenchment in out of date concepts
- Balanced technical evidence for fair trials

I have been developing new materials for the blogs that will be gradually rolled out over the next six months.

Four Blogs

Four Blogs

I have four open webblogs that are active:

http://trewmte.blogspot.com
http://cellsiteanalysis.blogspot.com
http://sim2usim.blogspot.com
http://forensicmobex.blogspot.com

The focus of these webblogs involves dealing with all forms of forensics and evidence relevant to mobile communications in the open arena that may impact now or in the future relevant to:

- Advancing forensic evidence and analysis by challenging methodology and entrenchment in out of date concepts
- Balanced technical evidence for fair trials

I have been developing new materials for the blogs that will be gradually rolled out over the next six months.

Cyber What?

Cyber What?

We had a short discussion recently about "cyber" labels and their meanings. The wave that has been engulfing society for the last decade, driven by Psychology "with everything" NNNOOOOWWWW!!!!  and the use of 'label-ism' phenomenon to influence us that we need/must have/do something, is now causing much confusion. 

Cybering was discussed, done and dusted, in the late 1990s early 2000, thus cybering has not just occurred as a new phenomenon. Label-ism, in the case of cybering, isn't helping its cause either when announcing cyber threats to the UK or the World (for that matter) where mistakes in the use of definitions are publicly announced. It wont help the security services to do their job - protect the Realm - if society doesn't understand what the heck is discussed.  There must be a drive from top Government (David Cameron top table people) to make a substantive effort to clarify label-ism when discussing publicly threats we are led to believe are imminent.

Discussing cyber defintions with Simon "Si" Biles, the security specialist at Thinking-Security dot com, he offered these descriptions assigned to their labels identifying possible security threats that might be engineered from within cyber space:

"There seems to have been a general mixing of the terms : cyber-warfare, cyber-terrorism & cyber-crime : the news, as is oft the way with things they don't/can't/won't understand, interchanges them without consideration.

"cyber-crime is no better or worse than it has ever been, phishing, cracking etc. are much the same as allways - there are highs and lows, but nothing particularly extreme. Of course these figures are allways exagerated by the number of crimes that are committed that have a computer used in their research/planning/excecution - but this isn't cyber-crime anymore than stealing a knife is "knife crime".

"cyber-terrorism, to take the traditional use of the word "terrorism" ( or arguably "freedom fighting" depending on where you are standing ) is the "guerrilla warfare" of the computer world - denial of service, defacements etc. For example the "Anonymous" attacks on the Copyright crowd. Where this "terrorism" impacts on the general public is few and far between - a denial of service against a particularly greedy bank might impact on a few, but in real terms, this doesn't, and is unlikely to, create problems on the scale or magnitude of a traditional terrorist attack. And again, this has been going on, much of a muchness for sometime - highs and lows - usually associated with world events - but predominantly from individuals or insignificant groups.

"cyber-warfare is a bit different, and, really hasn't been seen except in Georgia - and even then, although that was suspected to be from Russia, that was never really proved - it could as well have been from a reasonable size hacker group just stretching in a country where there was little chance of prosecution or repercussion. I guess what Greg is suggesting above is probably the worst case scenario where the internet is compromised in some way that means that businesses can't communicate funds transfers - e.g. PoS - in reality though, as "the internet" is built on a wide variety of technologies ( from many and varied manufacturers ) and is designed to be resilient in the case of nuclear war ( or not ... http://en.wikipedia.org/wiki/Arpanet#The_ARPANET_under_nuclear_attack ) the chances of "taking out the internet" for a given country are fairly limited in a cyber-warfare scenario. Infact you'd stand a better chance of taking out the internet in the UK with some more traditional arson against certain backbone sites ...

"It is this, final, threat that is both having it's bandwaggon jumped on and is being blown out of proportion. Like most things - it's exciting, so it gets a lot of press - you are more likely to be burgled, have your car stolen, be involved in a hit & run or have your pocket picked than you are to be a victim of cyber-crime. Even Identity Theft ( which is portrayed as cyber-crime) is considerably easier to achieve through a dust-bin sift than a computer. Cyber-terrorism ? I'd be delighted to sell "cyber-terrorism" insurance to anyone who wants it ! "

The term 'Cyber' has been discussed above in context with types of threats that could be generated using it. The discussions above do not rule out or suggest that cyber is or could be put to good use too.

Domestic Abuse is a Crime

Domestic Abuse is a Crime

If there was a public stand and famous people such as Simon Cowell, Cheryl Cole, Louis Walsh were stood on it promoting X-Factor no doubt crowds would pack around the stand listening adoringly to these famous people. Should we really need fame in our immediate presence then to pay the same equal attention when two ordinary non-famous people publicly speak about those who oppress, create mental fear and inflict physical pain and suffering?

Walking in the Surrey town of Dorking today in the area of an open air arcade there was such a stand and two women were there promoting help for those that have or are suffering from Domestic Abuse. No crowds thronged to stop and listen to their message. These two women represent relatively the unheard in our society who speak out on Domestic Abuse and the help that is available. They are the people who give their time freely and rarely get recognised for what they do. Well done to the two women I saw and spoke with today; one who outlined cultural domestic abuse and another an off duty Surrey Police Officer giving up her time to get the message out and familiar with Abuse crimes that she encounters during her work. Victims, I learned, can be women, children and men caught up in a cycle of abuse in relationships who may feel trapped and unable to speak out or speak up for themselves. Men, I understand, don't speak up because they feel too ashamed to tell anyone.

The statistics for Domestic Abuse crime in the UK makes very sad reading indeed and why I wanted to make this small contribution to help by offering to mention the Groups and their contact points where victims can go, get help and seek advice. All enquiries are in complete and strictist confidence.

If you are a victim, don't suffer in silence. Even if you are unsure but just want to check out where you stand - these are very skilled people who can help, if you will let them.

CONTACT TELEPHONE NUMBERS
Surrey Women's Aid 24-hour help-line: 01483-776822
Caterham Police Station: 01483-630292
East Surrey Domestic Abuse Services: 01737-771350
North Surrey Outreach: 01932-260690
Your Sanctuary Surrey helpline: 01483-776822
Childline: 0800 1111
National Domestic Abuse Helpline: 0808 2000 247

CONTACT WEBSITES:
www.esdas.org.uk
www.surreycc.gov.uk/domesticabuse
www.victimsupport.org.uk

CONTACT EMAIL:
support@esdas.org.uk

Mobile Phone outsourcing goes insourcing pt2

Do you remember back in March I wrote the piece about "Mobile Phone outsourcing goes insourcing" ( http://trewmte.blogspot.com/2010/03/mobile-phone-outsourcing-goes.html ), well yesterday I was given a link to Kent Police website and to the webpage dealing with public meeting notes:

http://www.kentpoliceauthority.gov.uk/public-meetings/audit-governance-committee/23-september-2009?p=2

Download and have a look at the report (link and heading as at Kent Police Website):

Item 19 Mobile Telephony Ananlysis

That is one heck of alot of money either way it is looked at for just one micro-section alone that overweights the scales on one side for public funds and yet when working as defence experts we have been systematically starved and drip fed minimal funding for the last 5 years. It could be quite laughable really (because the scales of justice are shown as balanced) if the times we are in weren't so dire. We will just have to wait and see how the new Government handles the way forward.

Vision of Mobile Phones in 1976

Photo courtesy of www.paleofuture.com/

 Vision of Mobile Phones in 1976

I am glad to see more and more information popping up on the Internet that identifies and reaffirms the exciting history of mobile telephones, originally called wireless telephones. I am and I believe I shall always be an advocate of this scientific technological advanced development. If there are details defining our science that can help people understand the history and future of mobile telephones then I want to know about it and let you know too.

In 2009 I set out historical reference relevant to mobile communications and telephones and in it referred to a particular important historical event, that being the first patented wireless telephone. "1908: Nathan B. Stubblefield invented and patented the first mobile telephone a 100-years ago." http://trewmte.blogspot.com/2009/01/mobile-forensics-and-evidence-degrees.html

A technological fact worth noting about Stubblefield's invention is that it did not make use of a computer central processing unit (CPU) which was not invented in 1908 and was many decades away. Thus mobile telephones were scientifically and technically defined then, as they are today, by the science with which the devices are intended to make use - wireless (radio signals)/telecommunications.

The Washington Post (February 20th 1910) ran a story of a development for wireless telephones to use an umbrella as an antenna and the thought that wireless telephones could be used for sending aerograms (a fore-runner idea to text messages) containing Valentine messages? http://www.paleofuture.com/blog/2007/5/29/your-own-wireless-telephone-1910.html

The aerogram idea would not be an idea that would be far fetched for 1910 given that previously technology was already in use for sending text messages. One hundred years on, I wrote in 2010 about Victorian Texting and its origins. "Victorian Texting was made possible with the use of the Wheatstone's ABC Telegraph originated in 1842 developed by the English physicist and inventor Sir Charles Wheatstone (1802-1875)." http://trewmte.blogspot.com/2010/01/victorian-texting.html

Wheatstone's invention of 1845 may fit with the notion for the possibility in 1910 of an aerogram (instead of a telegram) to be communicated over-the-air and again re-enforces the point how the concept of features originating from telecommunications could be used with wireless technology.

Sixty years on from 1910 our common understanding of mobile telephones started to come to fruitition. In 1976 a design (see image above) for the first portable telephone, so we are told, was not far off the design of mobile handsets used in the 1980s. http://www.paleofuture.com/blog/2009/8/30/portable-telephones-1976.html

Through out the last century and up-to-date wireless telephones (mobile phones/smart phones) utilise a natural science that remains the kernal for and primary concept of mobile telephones that appears unchangeable position and that is mobiles use radio signals. Today we speak of cellular radio, but the natural waveform of radio signals is still analogue in nature, irrespective of the modulation treatment applied to the analogue signals. Mobile telephones today have analogue-to-digital (A/D) signal processors to convert the radio signal into a digital format. Naturally, mobiles equally use a digital-to-analogue signal prcessor. I guess the day mobile telephones no longer need or use radio signals for over-the-air communications then that is the day when when we might re-name them as smart electronic devices. Until then, mobile telephones are here to stay and, as far as I can see, for many decades to come.

Apple's Killer Patent for Jailbreakers

Apple's Killer Patent for Jailbreakers

Apple has used the route of a patent to institute a series of measures to protect its devices from Jailbreakers, thieves and unauthorised users.

http://forensicmobex.blogspot.com/2010/08/apples-killer-patent-for-jailbreakers.html

US Case: Daubert and Cell Site Analysis Maps

US Case: Daubert and Cell Site Analysis Maps

I having been an advocate, as many of you know, for many years for the use in evidence of network operator generated analogue and digital cellular radio maps (eg best server plots/density maps & single cell prediction plots/density maps). That is because they are a composite compiled from collection of visible and discrete detail relevant to the operator's predication. They illustrate, if you will, a visual demonstration of a radio coverage strategy in an area. A recent US Case dealt with cell site maps as part of the evidence. The case of the US v Benford discussed by Law Professor Susan Brenner, at her webblog, makes interesting reading indeed:

http://cyb3rcrim3.blogspot.com/2010/08/daubert-and-cell-site-data.html

There are examples of cell site maps here at Mobile Telephone Evidence (link below):

http://trewmte.blogspot.com/2009/08/cell-site-analysis-csa-images.html

US Case: Daubert and Cell Site Analysis Maps

US Case: Daubert and Cell Site Analysis Maps

I having been an advocate, as many of you know, for many years for the use in evidence of network operator generated analogue and digital cellular radio maps (eg best server plots/density maps & single cell prediction plots/density maps). That is because they are a composite compiled from collection of visible and discrete detail relevant to the operator's predication. They illustrate, if you will, a visual demonstration of a radio coverage strategy in an area. A recent US Case dealt with cell site maps as part of the evidence. The case of the US v Benford discussed by Law Professor Susan Brenner, at her webblog, makes interesting reading indeed:

http://cyb3rcrim3.blogspot.com/2010/08/daubert-and-cell-site-data.html

There are examples of cell site maps here at Mobile Telephone Evidence (link below):

http://trewmte.blogspot.com/2009/08/cell-site-analysis-csa-images.html

More on Cell Site Analysis: http://cellsiteanalysis.blogspot.com

SMS 25 Years Old Today

SMS 25 Years Old Today

Today, SMS (short message service) text messaging cellebrates its birthday. The service was technically created in 1985, however the use of this communications technological advantage containing the message "Happy Christmas" sent in the UK over the Vodafone network was not seen until the first was message was transmitted on 3rd December 1992.

The ubiquitous use of SMS generated global revenues, researched has shown, over $150 billion for 2009 and is forecast to reach $233 billion by the end of 2014, according to Sheri Wells of SMS Media Group.

SMS texting is used by the rich and famous, film stars, singers to the general populus and it is hard to think of anywhere in the world that hasn't used the SMS service. But there are Countries that do not have SMS currently. Do you know the names of those countries and what are their population sizes?

SMS 25 Years Old Today

SMS 25 Years Old Today

Today, SMS (short message service) text messaging cellebrates its birthday. The service was technically created in 1985, however the use of this communications technological advantage containing the message "Happy Christmas" sent in the UK over the Vodafone network was not seen until the first was message was transmitted on 3rd December 1992.

The ubiquitous use of SMS generated global revenues, researched has shown, over $150 billion for 2009 and is forecast to reach $233 billion by the end of 2014, according to Sheri Wells of SMS Media Group.

SMS texting is used by the rich and famous, film stars, singers to the general populus and it is hard to think of anywhere in the world that hasn't used the SMS service. But there are Countries that do not have SMS currently. Do you know the names of those countries and what are their population sizes?

One-Size-Fits-All Power Charger

One-Size-Fits-All Power Charger

Manufacturers have agreed to create a single one-size-fits-all power charger, thus the expectation of a standard PSU interface will be used. The approach is being applied to data-enabled mobile phones for models to be distributed in 2011 according to the EU, as reported by Business Week:

http://www.businessweek.com/ap/financialnews/D9H9F7H00.htm?

Business Week identify the manufacturers as Apple, Emblaze Mobile, Huawei Technologies, LGE, Motorola, NEC, Nokia, Qualcomm, Research in Motion (RIM), Samsung, SonyEricsson, TCT Mobile, Texas Instruments.

The news of a single charger has been around for a while but is a useful reminder as apparently the 2011 handsets wont be supplied with charger according to the Business Week article.

Handsets with the new charger design could prove helpful when we are examining mobile phones where there is no charger supplied with the 'exhibit' or the customer's DFE.