Mobile app version of vmapp.org
Login or Join
Phylliss660

: Get phone number of (via mobile networks) browsing mobile device I recently figured out, that the web site of my phone provider (mobile) mysteriously identifies me and automatically logs me into

@Phylliss660

Posted in: #Mobile #Security

I recently figured out, that the web site of my phone provider (mobile) mysteriously identifies me and automatically logs me into my account when I'm accessing with my android phone, as if it knew my phone number. (I used several browsers. When I'm using the phone as WLAN hotspot and access the same site from another device that doesn't happen.)

How does my phone provider do that? On the one hand, as a programmer, I'd like to be able to do that too, but on the other hand, as a user, I'm kind of scared. What information do they have, such that they (believe they) are able to identify me just by my device?

I hope this question isn't completely inappropriate for this site; feel free to add better tags — it's hard to find the right ones without knowing the Webmasters site at all.

10.03% popularity Vote Up Vote Down


Login to follow query

More posts by @Phylliss660

3 Comments

Sorted by latest first Latest Oldest Best

 

@Deb1703797

I'm working for a company that actually use it to make a "user detection".
The phone number, and some other informations, are provided directly from the operators (telecom, orange, etc.), so there is no cookies or such things, there are simply a bunch of operators API to be called and they simply answer with the phone number, and some other informations.
hope this helps.

10% popularity Vote Up Vote Down


 

@Chiappetta492

It could access the special apps installed by the provider and get that information from it.(Just a guess!!, If your android has the provider customized OS with Apps of their own installed)

10% popularity Vote Up Vote Down


 

@Jamie184

My most obvious answer would be: you have an "auto login" cookie on your phone. This off course has nothing to do with your android phone.


What happens if you clear your browser data on your mobile phone and enter the site again?
What happens on a normal browser after you log on, close browser, open browser and go to the site again?


A second guess (altough I think that would be a lot harder but possibly do-able?) is that the provider site uses your phone location in conjunction with your current mcc, mnc, cellID and lac to "locate" you. This way it might know it could be you

(see: www.opencellid.org/)

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme