O2 Giving out phone numbers?

Well if you navigate there with a normal browser it shows the header that you'd expect so Im assuming it is actually being put in the HTTP Header.

Will have to pipe this through my own proxy tomorrow and see what the headers look like

Thats my point, there is nothing fancy going on here, he (the site owner) is just printing out the headers.
 
By they do you mean "lew.io" or the browser. All that site is doing is printing out the headers the server is receiving, just to expose the problem nothing more.

Yeah I was wrong, I was thinking it might be doing a javascript jobby but it looks like the real deal.
Try other networks, don't understand why this is only 02.
 
Can someone who sees their phone number tell me what the name of the header is?

For reference, the name is the bit I've underlined:

Code:
[u]Host:[/u] lew.io

I wonder if it doesn't show up for jailbroken/rooted phones?
 
The headers sent are dependant on the browser used.

Thats not entirely true. All mobile operators modify http traffic at a network level. things such as sending compressed images or minifying javascript. So it is possible and in the case seems likely that it is a network level issue not a phone software thing.

the reason the opera browser gets round the issue is that it sends all traffic through their own servers so that they can compress it to make their browser faster. part of this proxy process means that O2 can't modify the headers at a network level.
 
Can someone who sees their phone number tell me what the name of the header is?

For reference, the name is the bit I've underlined:

Code:
[u]Host:[/u] lew.io

I wonder if it doesn't show up for jailbroken/rooted phones?

x-up-calling-line-id is the name of the header my number showed up on.
 
Thats not entirely true. All mobile operators modify http traffic at a network level. things such as sending compressed images or minifying javascript. So it is possible and in the case seems likely that it is a network level issue not a phone software thing..
Yeah you're right, I've just been reading up.

Didn't realised O2 added javascript to each page served as well. That's a bit cheeky.
 
OK, so update - I always have Caller ID set to "Hide". Changed this to "show number" and now it does indeed display additional information which includes the phone number.

Curiously when I change it back to hidden it continues to display the additional details!
 
the guy who built the little lew.io/headers.php tool raised it with O2 on twitter, they are looking into it. But their initial response was "that's normal" however I think they might have not have understood the issue.
 
Last edited:
Back
Top Bottom