If someone wants to steal your phone number -- say, to intercept the two-factor authentication SMSes needed to break into your bank account or other vital service -- they hijack your SIM by impersonating you to your phone company (or by bribing someone at the company to reassign your phone number to them), and this has made the security of phone numbers into a top concern for security experts and telcoms companies, as there are millions of dollars at stake.
Enter Comcast, all-time champion "most-hated company in America," whose Xfinity Mobile cellular service assigns the same unchangeable PIN to every customer: 0000.
But don't worry, Comcast says that this only puts you at risk if you recycle user-names and passwords, and nobody does that.
Because of that 0000 PIN, getting a victim's Xfinity Mobile account number was the main obstacle for attackers. A Comcast spokesperson told Ars that this account number is available only by logging into the Xfinity Mobile Web portal and is therefore protected by a Comcast's user's password. Comcast told Ars that it does not send out paper bills for Xfinity Mobile and does not include that account number in emails to customers, cutting off two potential ways that attackers could get the account number.
Comcast indicated that the number-porting attack affected only customers who reused passwords across multiple sites.
Comcast set mobile pins to “0000,” helping attackers steal phone numbers [Jon Brodkin/Ars Technica]
(Image: Specious, CC-BY-SA)
Sytech is a private sector contractor to FSB, the Russian spy-agency that is the successor to the KGB; on July 13th, hacking group 0v1ru$ defaced Sytech's site and claimed to have hacked their internal network and stolen their files -- this week, the Russian hacking group Digitalrevolution began to pass these files on to Russian […]
“For the first time ever, there’s a comprehensive map on where local police departments have partnered with Amazon’s Ring,” CNet’s Alfred Ng writes.
“The Palantir user guide shows that police can start with almost no information about a person of interest and instantly know extremely intimate details about their lives.”
Looking to upgrade that old laptop or tablet? Holiday sales may be way on the horizon, but there’s an even better way to get like-new tech for a steal. Here are 10 of our favorite deals on personal computers and gaming gear – refurbished, renewed or brand new. Acer Touchscreen 11′ Chromebook 16GB (Certified Refurbished) […]
Vape technology has been around long enough that vapers are starting to get picky about their gear. Luckily, so are we. From disposable models to cutting-edge touchscreen atomizers, there’s a vaporizer in this roundup to suit every taste. Hera 2 – World’s Most Advanced Dual-Use Vaporizer Choose between dry herb or oil extraction modes – […]
With enough practice and commitment, anyone can be a visual artist. But without the right instruction, that time spent honing your skills could seem like an eternity. If you really want to see where your talent can take you, you need sound fundamentals – and no matter what discipline or genre you lean toward, the […]