News for hackers. Stuff that matters.

A comment on Surveillance vendors caught abusing access to telcos to track people's locations. Parent comment

Re:Surveillance vendors caught abusing access to telcos to t... by pigggg on Thursday April 23, 2026 @10:43AM (#47876337)
It's literally a known thing at telcos in various roles they find people looking up folks dox regularly. If someone registers a complaint that someone access their data they'll look it up and deal with them.

I once asked someone on the security /investigations side if you are logging what everyone is doing can't you easily find when folks are looking up stuff unrelated to their job? Their answer: we'd have to fire over half the people here - everyone is constantly looking up people's PII - celebrities, friends, enemies, etc. it's almost considered a unofficial perk of the job. This was from one of the largest US Telco carriers circa 2010. Maybe things have changed, hopefully.

[ Parent | on HN ]
Re:Surveillance vendors caught abusing access to telcos to t... by pocksuppet on Thursday April 23, 2026 @11:07AM (#47876628)
In Western Europe they would get fired and go to jail. That's why Western Europe doxx information is considered the most valuable in the world. It wasn't complicated to create that situation. They can just fire a few, drag one to court, and rely on the chilling effect.
[ Parent | on HN ]
Re:Surveillance vendors caught abusing access to telcos to t... by dboreham on Thursday April 23, 2026 @02:05PM (#47879139)
Calling BS on that story. You don't need to fire anyone. You just rate limit access to lookups where the customer didn't initiate a support call themselves, and require supervisor approval and audit of said approvals on a regular basis. I've also worked on systems where accounts could be marked as sensitive (e.g. the celebrities) and those needed additional sign off to be accessed.
[ Parent | on HN ]
Re:Surveillance vendors caught abusing access to telcos to t... by lostlogin on Thursday April 23, 2026 @02:47PM (#47879862)
I’ve worked in systems like that too.

I can tell you exactly how much privacy the celebrities got. There is no record of the sharing or the breaches.

[ Parent | on HN ]