Re:Can We Stop Pretending SMS Is Secure Now?
by wealthyyy on Wednesday March 17, 2021 @06:12AM
(#26488898)
All your references are pointing to Lucky225 who is trying to market his anti-fraud product.
NetNumber has no competitors. It's a routing database.
The Vice article is a paid piece. This attack doesn't work with any of US Mobile carriers.
Re:Can We Stop Pretending SMS Is Secure Now?
by wealthyyy on Wednesday March 17, 2021 @06:15AM
(#26488936)
Please see my comments at this thread, https://news.ycombinator.com/item?id=26468892
A lot of people confirmed this as FUD.
The ability to hijack text messages through an online service was also shown in an article Krebs' source mentioned [2].
Perhaps you're right that upstream agreements with mobile carriers should already be blocked, but in practice it's been proven not to be.
There was a change to NetNumber's systems on 11 March to combat this, but there's no guarantee that their competitors don't have similar flaws or that the measures taken were good enough to stop the attack in practice.
Even still, if the problem might be fixed in the entire US, that doesn't mean anything for the rest of the world.
[1]: https://www.vice.com/en/article/y3g8wb/hacker-got-my-texts-1...
[2]: https://lucky225.medium.com/its-time-to-stop-using-sms-for-a...