Teletext Holidays left 200k customer call recordings exposed
theregister.co.uk
theregister.co.uk
and in the original:
"Instead of saying their card number and three-digit security number, customers type them into the keypad – protecting the most serious financial information."
We should produce a DTMF blockchain, seems like the best security out there. /s On a more serious note: Are regular people/journalists not aware of how pressing buttons on a phone works anymore?
Given that a lot of people now think of a phone as being a handheld rectangular device with a touchscreen, I'd say yes.
Even in the days of pulse dialing and the early DTMF (with things like 2600), I think people didn't really know either.
The DTMF system is so that the computer receives the card number directly. Of course that could be done with speech recognition as well.
And in any case, as others have pointed out, a phone connection is not a secured line.
But then again, a credit card fraud incident isn't the end of the world either. So maybe the risk is acceptable.
Not sure if they ever were, but they surely aren't now. Even in terms of basic knowledge about DTMF.
When it comes to the details, I'm not sure how pressing buttons on a phone works nowadays. I think there's at least 3 different ways it can work with SIP. I would expect mobile phones to be just as bad.
How is that a "basic security measure"? It seems a lot more trivial for a machine to sweep the audio for the keypad tones and looks for 16 digits where the appropriate check digit check out, than to try to parse human speech.