I didn't know this, but according to OSnews' Thom Holwerda, every smartphone runs two operating systems. There is the one you see (Android, iOS, PalmOS) and then there is a "a small operating system that manages everything related to radio." The problem, explains Thom, is that not only very little is known about this other system, but considering its responsibility to the functioning of a modern communication device, it is everything but safe and secure.
You can do some crazy things with these exploits. For instance, you can turn on auto-answer, using the Hayes command set. This is a command language for modems designed in 1981, and it still works on modern baseband processors found in smartphones today (!). The auto-answer can be made silent and invisible, too.
While we can sort-of assume that the base stations in cell towers operated by large carriers are "safe", the fact of the matter is that base stations are becoming a lot cheaper, and are being sold on eBay - and there are even open source base station software packages. Such base stations can be used to target phones. Put a compromised base station in a crowded area - or even a financial district or some other sensitive area - and you can remotely turn on microphones, cameras, place rootkits, place calls/send SMS messages to expensive numbers, and so on. Yes, you can even brick phones permanently.
This is a pretty serious issue, but one that you rarely hear about. This is such low-level, complex software that I would guess very few people in the world actually understand everything that's going on here.
|Using Fake Fingerprints to By-Pass Apple's Touch ID|
|CellScope: Turn Your Smartphone Into a Microscope|
|Who Are You Going to Impress When This Year's iPhone Looks the Same as Last Year's?|
|The iPhone's Secret Serial Port|
|In Japan, Cellphones Have Become Too Complex to Use|
|“Both spacecraft are still operational when they reached interstellar space.”|
|"Free apps make money by selling your personal data."|
|CaptchaTweet: Write Tweets in Captcha Form|
|How to Avoid Jury Duty|
|“Initial riders may be more comfortable getting into a car with a human in the driver seat.”|
|The (Very Scary) People of Public Transit|
|The Festive Funk Machine: Click to Make Your Own Festive Music|
|Naked Preacher Lady [NSFW]|
|Fake Name Generator|
|“We’ve received requests to add some artificial noise to the buses so that people can hear them.”|