heliosj's news, thoughts, geek stuff, and more...

First, after a quick Google search, I realize I'm the last person in the industry to know this was possible, but I figured I'd share what I discovered a few moments ago nevertheless.

I had my mobile phone voicemail setup so if I called my voicemail from my mobile phone, it would just let me right in without a password. I always assumed that it relied on the unique IMEI code to determine if I was calling from my phone, but it doesn't. On a whim, I called my cell phone from another phone while spoofing the caller ID (to that of my mobile number) and it let me right into the voicemail.

Needless to say, I have the password option enabled now.

I only tested this with AT&T, maybe other carriers are a little more secure.