±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 32595
New Yesterday: 5 Visitors: 115

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Messages, Missed Calls, and no signal

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Messages, Missed Calls, and no signal

Post Posted: Tue Sep 17, 2013 9:42 pm

Not being carrier specific, what have been your experiences with this type of situation.

You are driving through an area and have a signal just fine, call drops, signal goes to 0 bars and then no service. 45 minutes later you hit a tower and get service back and notice 10 SMS, and 4 missed calls (insert any number you want in there)

The messages should show the time they were actually sent from the other user, not the time you were able to ping the newest tower. Right or Wrong?

From my experiences with ATT it does show the time of the message being sent, however people have said that they have been out of service for a long time on a drive through a rural area, and were bombarded with a ton of SMS which all showed the time they hit the first available tower.
_________________
Why order a taco when you can ask it politely?

Alan B. "A man can live a good life, be honorable, give to charity, but in the end, the number of people who come to his funeral is generally dependent on the weather. " 

armresl
Senior Member
 
 
  

Re: Messages, Missed Calls, and no signal

Post Posted: Thu Sep 19, 2013 12:26 am

On my Sprint BlackBerry it shows the time(s) the messages hit my phone. I'm pretty sure it does the same thing when I shut my phone off at night and turn it on again in the morning. The new messages have the same time -- the time I turn the phone on. I'll verify this next time I'm able to.  

Astro
Member
 
 
  

Re: Messages, Missed Calls, and no signal

Post Posted: Thu Sep 19, 2013 1:13 am

That's been my experience too, when the messages are received on the phone, but admittedly I haven't had to dig in to that much so I can't really comment on any variances that may occur from carrier to carrier or phone to phone.  

Adam10541
Senior Member
 
 
  

Re: Messages, Missed Calls, and no signal

Post Posted: Thu Sep 19, 2013 4:30 am

- armresl
The messages should show the time they were actually sent from the other user, not the time you were able to ping the newest tower. Right or Wrong?


Depending on which operating system (OS) is in use on the handset it could be the date/time can be determined from the handset clock and appended to the message (SQLdatabase) as seen on the handset GUI and not the network date/time stamp. It is not possible at this stage to confirm this as in the above discussion it isn't stated which handsets/OSs are relevant(?).

Moreover, the home network wouldn't usually allocate a new timestamp to the SMS date/time when traversing its own network merely because the intended receiving party's handset is out of contact (c.f. OP scenario with the handset being switched off for 45 mins).

Moreover, the sending party's message may be subject to a 'validity period'. See some pointers here:

France Car Shootings and Mobile Evidence
trewmte.blogspot.co.uk...dence.html

UICC Coding Schemes
46 = "SM Validity Period Expired"
sim2usim.blogspot.co.u...hemes.html

How would 'validity period' effectively operate in practice if every proxy/server/network added a new date and time stamp to the: SMS wrapper (encrypted message, PDU, SMS header)?

SMS date/time stamp may/might change with possible causes, generally speaking, when crossing international mobile operator networks, network roaming (local/international) and/or tromboning.
_________________
Institute for Digital Forensics (IDF) - www.linkedin.com/groups/2436720
Mobile Telephone Examination Board (MTEB) - www.linkedin.com/groups/141739
Universal Network Investigations - www.linkedin.com/groups/13536130
Mobile Telephone Evidence & Forensics trewmte.blogspot.com 

trewmte
Senior Member
 
 

Reply to topicReply to topic

Share and Like this forum topic to get more replies




Page 1 of 1