HNHacker News
TopNewBestAskShowJobs

Nullificus

32 karma · joined February 8, 2018

submissionscomments
Nullificus··on Freedom Mobile's 4 digit password limit
https://web.archive.org/web/20221229201428/https://null.pink...
Nullificus··on Freedom Mobile's 4 digit password limit
I will reach out to CSE and CCTS when they open as well.
Nullificus··on Freedom Mobile's 4 digit password limit
There's no timing limits but your own, the only limit I could note is 10 per code. You have to guess a lot, but you don't get stopped. There's also nothing you can do as a target, even if you know you're a target. Support cannot disable your account.
Nullificus··on Freedom Mobile's 4 digit password limit
I worked with the Office of the Privacy Commissioner of Canada(OPC) on this a few years ago. I don't have credentials and that's enough for them not to take it seriously.

I'm the only reason the 2FA is there. That change was the only change they would commit to. A few days ago is the first time since that I've logged into my account.

I'm planning to contact the Competition Bureau tomorrow with the information. They are currently looking at Freedom's viability under a significantly less powerful company than Shaw Communications Inc.

Nullificus··on Freedom Mobile's 4 digit password limit
Getting the correct phone number and pin combo is step one. That's the four digit pin.

Step two is as many tries at the 2FA as you would like. The format is 0#####. It will take some time for sure, but you get to control the phone number as your prize

Alternatively, the 4-digit pin is the security for their support line. You can obtain that without guessing the 2FA. Social engineering takes care of the rest.

Nullificus··on Freedom Mobile's 4 digit password limit
It's a five-digit pin you can guess at infinitely.
Nullificus··on Freedom Mobile's 4 digit password limit
It's clear I don't know how to handle this. I'm hoping someone here can pass it along to the correct people and have them actually listen.