Hacker News Reader

One does not even need to bribe or defraud telecom employees, the biggest gaping hole is the fact that roaming requests are insecure, and SMSes are plaintexted.

On "certain Russian forums" the talk is that was the way how British MPs were deprived of their email mailboxes in 2016. Somebody dug up their IMSIs from leaks and public dbs, and sent roaming requests through Megafon - Russia's biggest telco

View on HN

I doubt that was necessary. Many of the telcos use atrocious pin security for voicemails- and they fail to prevent spoofed calls to their voicemail servers. Makes for a bad combination.

SS7 hacking to achieve that end would be a higher barrier to entry and more likely to get caught.

> One does not even need to bribe or defraud telecom employees

wow, no proof of stake required, rating 1/5

Reply on news.ycombinator.com