Have a look at https://www.theguardian.com/technology/2006/feb/01/news.g2 https://www.theguardian.com/technology/2006/feb/01/news.g2 This news article was abou

Have a look at https://www.theguardian.com/technology/2006/feb/01/news.g2 https://www.theguardian.com/technology/2006/feb/01/news.g2 This news article was about a year later than the original once, from what I remember. It misses the part that you can replace the name and spoof the SMS though. The SMS quoted in the article does demonstrate the vulnerabilities mentioned though "Ben Goldacre has requested to add you to their Buddy List! To accept, simply reply to this message with 'LOCATE'" Interesting to re-discover this now, I had no idea who Ben Goldacre was at the time. If you find services still vulnerable, let me know. I'm still friends with the journalist who initially spoke to Vodafone before publishing in the first place. I remember them not being too pleased, but as I say, it never got fixed.