Hacker News Reader

Comment by sneak | Hacker News Reader

Yet another data point supporting the fact that the phone number people have for you should never be that of the sim card actually inside your phone.

View on HN

Not sure how relevant that is against a nation state actor that’s willing to pull from airline passenger records.

All they’d have have to do is get a few timed hits for your location and then look for a common IMEI at nearby towers.

And if you have a burner phone, they can just track which IMEIs tend to travel together.

> a nation state actor

I am a bit of a broken record on this point, but it's a state actor.

Spain comprises multiple nations, Catalonia being one of them.

Nowhere in its constitution is defined like that, it’s not a confederation of nations but a parliamentarian monarchy that respects regional cultural differences.

No official document, not even the Constitution, can be a final authority on what a nation is. That's just the official definition.

Many scholars, politicians, and citizens, even excluding people outside of the Overton window, describe Spain as containing several nations. At the very least Catalonia, the Basque Country / Euskal Herria, and Galicia are widely (but not unanimously) considered to have the historic, cultural, social characteristics that would make them nations. The spanish constitution is a document of compromise, born of a very special time in history; whatever it says about what Spain is, we don't have to accept it.

(Biases disclaimer: I'm Spanish, specifically castilian; I don't support Catalonian independence, and I dislike all nationalisms; all nations are more like big balls of wibbly wobbly... nation-y wimey... stuff)

This piece of news doesn't yet show up on the spanish newspapers I trust; I'm really curious to see if it makes the news. I'll be extremely concern if, as I fear, if doesn't.

"Many people are saying that or this"

We are very misunderstood, for sure.

‘Nation state’ is the appropriate term of art in the context of cyber security. The fact that a domestic service appears to be attacking an area that is seeking autonomy makes it more relevant.

Only one of them control the state, and that is and has always been Castilla.

This may be a technical forum, people can Google it up and do some deep research.

> Only one of them control the state, and that is and has always been Castilla.

More BS. Are you saying that the Catalonian politicians in the government are spies from Castilla? Maybe disguised under evil twisted castillian moustaches?.

Please, lets be serious. I can see politicians from each coin of Spain in the government.

Getting upset about people confusing the difference between nation and state is like getting upset about people using hacker to mean computer criminal. That ship has sailed long time ago.

Also when you dive into what 'nation' really means, it starts hitting people's racism and 'X supremacy' instincts fairly quickly, so people use the word ethnicity or culture instead nowadays.

I'm not sure I understand. Let's say your SIM card has number X but you also use Google Voice number Y. If you buy flight tickets, you're probably going to give them number Y when you purchase your tickets. If a malicious state actor has access to the passenger flight manifests for the airline it's pretty likely that they also access to the other information you've given the airline, including the phone number and email you supplied the airline, so they'll also know that you gave them number Y in the checkout flow. What am I missing here?

> What am I missing here?

To my knowledge NSO software (and similar) target exploits in OS-specific applications (think default Messages app on iOS) rather than, e.g., Google Voice. That being said, I personally don't know if Google Voice and similar are special enough not to have their own exploits (spoiler: they probably aren't, and Google Voice in particular would be a very enticing target).

I'd expect there's more to it than that, though. I'm really not familiar with these exploits.

How do you do that?

Look into the Google Voice app. You can get a free US number that works with both SMS and calls. It routes calls through Google's VOIP I believe.

I use it as a burner for any website that requires a phone number. I figure it will be easy enough to change my burner phone number if it gets leaked to some shady DB.

But pretty much no where else in the world -- including Spain. So this is practical how for anyone outside if the US?

Substitute DIDww for Google Voice, then.

Last time I looked, you can't sign up and use Google and Google Voice without verifying that you're a real person via SMS.

And then you run into many services that right out refuse VOIP numbers, some of them fairly essential or near essential.

I don't use those services. I change the SIM card in my phone (and its direct number) several times per year, it would make use of those services impossible.

Reply on news.ycombinator.com