News for hackers. Stuff that matters.

A comment on Can We Stop Pretending SMS Is Secure Now?. Parent comment

Re:Can We Stop Pretending SMS Is Secure Now? by wealthyyy on Wednesday March 17, 2021 @07:55AM (#26489795)
The Banks already has anti fraud detection systems in place to detect Roaming attacks. They can see whether number is Roaming enabled or not.

The Telecoms do prevent it with Firewalls.

As for CDMA, Please see,

https://www.wyden.senate.gov/imo/media/doc/Verizon%20SS7%20L...

[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by baybal2 on Wednesday March 17, 2021 @07:57AM (#26489824)
Banks cannot see if a number is in roaming or not, unless the phone company explicitly tells them through some means.

I so far never heard of anything like this.

[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by wealthyyy on Wednesday March 17, 2021 @08:02AM (#26489862)
How come you forget about HLR?

Banks can see. There are lot of APIs on the web that provides this capability.

One example,

https://www.messagebird.com/lookup/

[ Parent | on HN ]
Re:Can We Stop Pretending SMS Is Secure Now? by baybal2 on Wednesday March 17, 2021 @08:04AM (#26489886)
That looks more interesting. Never heard of such APIs being sold for more than a single operator.

How many operators in the world sell them this access?

[ Parent | on HN ]