News for hackers. Stuff that matters.

A comment on Can We Stop Pretending SMS Is Secure Now?. Parent comment

Re:Can We Stop Pretending SMS Is Secure Now? by dataflow on Wednesday March 17, 2021 @06:24AM (#26489003)
> The attack vector only works for Landlines, VOIP, Toll-free.

I'm confused, didn't the article say "A few minutes after they entered my T-Mobile number into Sakari, Lucky225 started receiving text messages that were meant for me"? T-Mobile is a normal cellular carrier here isn't it? What part of it required a VOIP line?

P.S. You can edit your old comments instead of leaving 4 different ones in the same thread.

EDIT: Looking at this 5-day-old user's history, I think it's safe to say we shouldn't take the comments at face value:

https://news.ycombinator.com/item?id=26455000

https://news.ycombinator.com/item?id=26472770

https://news.ycombinator.com/item?id=26464287

[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by homero on Wednesday March 17, 2021 @06:28AM (#26489031)
He's saying Lucky225 lied to market his service https://okeymonitor.com/ in the article.
[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by dataflow on Wednesday March 17, 2021 @06:31AM (#26489052)
Lucky225 lied about... what exactly? The Vice reporter literally says "Then he showed he had received texts that were meant for me that he had intercepted. Later he took over my WhatsApp account, too, and texted a friend pretending to be me."
[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by homero on Wednesday March 17, 2021 @06:34AM (#26489074)
Lied that it was T-Mobile

I'm hoping he lied and T-Mobile SMS can't just be redirected.

[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by dataflow on Wednesday March 17, 2021 @06:35AM (#26489082)
Uhm, it's the Vice reporter who's saying "my T-Mobile number"... are you saying he has no idea who his carrier is and Lucky225 told him his carrier was T-Mobile?!?!?!
[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by homero on Wednesday March 17, 2021 @06:36AM (#26489090)
Well then he didn't lie I guess if it was the journalist getting hijacked live in T-Mobile
[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by dataflow on Wednesday March 17, 2021 @06:37AM (#26489101)
Well that's what the article says. It seems like you have no idea what the allegation is about, and the allegation itself seems to fly pretty blatantly in the face of the article too.
[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by homero on Wednesday March 17, 2021 @06:38AM (#26489106)
The allegation is mobile carriers can't be redirected. Only landline and voip.

Update: So his allegation is there is no reporter supposedly and it's a paid article.

[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by dataflow on Wednesday March 17, 2021 @06:40AM (#26489117)
Which directly contradicts the article saying it was T-Mobile...
[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by homero on Wednesday March 17, 2021 @06:43AM (#26489134)
Well that's what he's claiming https://news.ycombinator.com/item?id=26488898 paid article

I want to know who is right wealthyyy or Lucky225

[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by dataflow on Wednesday March 17, 2021 @06:46AM (#26489154)
Well that's why I'm pushing back against it. I very much want to know too. So far, given wealthyyy is a 5-day-old account making so many serious accusations of dishonesty [1] [2] against a Vice reporter without a shred of evidence, it should be obvious who has more credibility right now.

[1] https://news.ycombinator.com/item?id=26474437

[2] https://news.ycombinator.com/item?id=26474424

[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by wealthyyy on Wednesday March 17, 2021 @08:23AM (#26490064)
I don't give ....

Well what. It's obvious who you are. You are Lucky...

Account age is biased way to trust an individual. I could have bought an old HN account from someone but I didn't.

[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by wealthyyy on Wednesday March 17, 2021 @07:16AM (#26489445)
Look, Any Vice reporter can be bribed. You're missing the point.
[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by dataflow on Wednesday March 17, 2021 @07:18AM (#26489463)
You accuse people of dishonesty so easily and don't feel any need to show a single shred of evidence supporting your position?
[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by wealthyyy on Wednesday March 17, 2021 @08:05AM (#26489895)
Mr Flow, Please try a TMobile number on ZipWhip. You will see it fails. You will now claim that I am lying and that NetNumber has fixed this. So there is nothing I can do to help you.

I have known about this attack since 2012, but I did not publicly talk about how insecure SMS is for promoting an anti-fraud product.

Note, this is just the tip of the iceberg. There are other attack vectors that only I know!

[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by wealthyyy on Wednesday March 17, 2021 @07:13AM (#26489420)
You are personally attacking me for no reason. What does my other comments has to do with this comment?

I don't care whether you believe me or not. This is a fake news at it's best.

Regarding my comments,

[1] That lady is self marketing guru. It's confirmed everywhere even Reddit.

[2] Modern C++ is simpler than TypeScript, Go, Rust. Modern C++ become more like Python.

https://preshing.com/20141202/cpp-has-become-more-pythonic/

https://web.archive.org/web/20131015192353/http://cpp-next.c...

[3] The comment about Christ is a Joke. Can't I make Jokes on HN?

[ Parent | on HN ]