HNHacker News
TopNewBestAskShowJobs

TmoSecuritySux

45 karma · joined January 20, 2023

submissionscomments
TmoSecuritySux··on Tell HN: T-Mobile breach- double fuck up
You received it 2 hours ago? That’s nice. I called my at Metro T-Mobile Corporate district managers (but actually they were actually just fired The other day, DDMs and even the higher level Zone Managers too-this is public knowledge and news can be found on Google) - so they were of no help) attempted to file a formal security incident ticket through our normal escalation horline regarding is issue 10 hours ago and was told they were already aware.
TmoSecuritySux··on Tell HN: T-Mobile breach- double fuck up
Really as in as the time of comment- You were still sent the errant http://metro-tmo.co approx 2 hours ago? I called in and filed a security incident ticket like 10 hours ago. They said no ticket filing would be to be necessary, as they were aware of the issue. So it’s a mystery to my me how you’d be getting that Mis-spelled link still over 8 hours after I reported it.
TmoSecuritySux··on Tell HN: T-Mobile breach- double fuck up
Metro by T-Mobile “Authorized Dealers” aren’t legally considered “franchises” as such.
TmoSecuritySux··on Tell HN: T-Mobile breach- double fuck up
It’s an accident. Who owns that “metro-tmo.co” doesn’t seem to have realized this mistake quite yet? no doubt is getting tons of clicks to their parked adspam site. I can picture this being resolved by buying out or seizing-via-legal-injunction the metro-tmo.co domain under trademark law. may be too late to “unsend” the texts.
TmoSecuritySux··on Tell HN: T-Mobile breach- double fuck up
It’s a bit complicated. I work for a Metro Authorized Dealer(basically, a franchise). About 98% of Metro stores are Dealer-owned and 2% are Corporate. operationally, the upmost level we are ultimately beholden to controlled by, and at the mercy T-Mobile leadership (who regularly fines Dealers for the most trivial of things, has unrealistic expectations and as such I’d say half of Metro stores are operating at a loss and several thousand already shuttered in the last few years). T-Mobile leadership has autonomy to fire any Metro Authorized Dealer employee or revoke the Dealer at will. So basically as an employee I’m subservient to T-Mobile leadership and use T-Mobile Enterprise equipment & software but I don’t actually work for “T-Mobile” proper.
TmoSecuritySux··on Tell HN: T-Mobile breach- double fuck up
No, whoever is in charge of writing High Priority Memos on cx accounts at Metro by T-Mobile / T-Mobile Corporate made a typo in the Memo itself which links to a spam domain. The memo also claims this exact message was also sent to customers phones.

Typo URL in internal account memos + texts sent by the company to subscribers : http://metro-tmo.co/CustInfo

Actual legitimate URL they meant to put : http://metro-tmo.com/CustInfo