News for hackers. Stuff that matters.

A comment on Facebook won’t let you opt out of its phone number ‘look up’ setting. Parent comment

Re:Facebook won’t let you opt out of its phone number ‘look ... by disiplus on Monday March 04, 2019 @07:18AM (#19300659)
phone numbers cost close to nothing to operators, but running a voip infrastructure hast its costs, and a lot of those costs come from protecting it from hacking attempts. They love open pbx boxes where they can generate a significant cost, or use to spam others.

also compassion with domain is not exactly fair in this case, it would make more sense to compare it to ip address.

[ Parent | on HN ]
Re:Facebook won’t let you opt out of its phone number ‘look ... by StudentStuff on Monday March 04, 2019 @03:02PM (#19304770)
Fail2ban, not using IP based auth, and mandatory TLS/SRTP will generally cover your bases (ofc, Fail2ban should be banning any IPs attempting TCP/UDP registration or calling without SRTP).

Not really rocket science, but the VOIP industry is stuck in the 1990s when it comes to security practices related to their core offering. Its a terrible state of affairs!

[ Parent | on HN ]