3 ms·
Company that routes SMS for all major US carriers was hacked for five years
- eutropia 5y ago> Syniverse and carriers have not said whether the hacker had access to customers' text messages. I think it’s safe to assume that if you’ve been owned for five years the hackers have access to whatever they want. That’s more seniority than the average tech employee’s tenure at a company these days.
- landemva 5y agoAnyone who uses SMS two factor auth is insane. I'm thinking of TDAmeritrade, which requires it for their login reset procedure.
- sofixa 5y agoIf anyone needed a reminder that SMS makes for a poor second factor.
- PaulHoule 5y agoIf you had access to that kind of information you wouldn't want to take advantage of it in any way that might become visible, because you'd get busted. It's like how John Walker only sold month-old crypto keys from the US Navy to the Soviet Union https://news.usni.org/2014/09/02/john-walker-spy-ring-u-s-navys-biggest-betrayal https://news.usni.org/2014/09/02/john-walker-spy-ring-u-s-na... Had the USSR been decoding US Navy messages in real time, they might have used that information, making the US Navy suspicious about how the USSR knew what it did, and causing the leak to be exposed more quickly than it was.
- sofixa 5y agoThat's a very old intelligence conundrum. Using enough intelligence to benefit you without exposing how much ( and potentially from where) you know is a very tough problem.
- duckmysick 5y agoI'm surprised this doesn't generate more discussion. Am I overestimating how big of a deal it is? The lack of the details doesn't help either.
- jum4 5y agoAnyone has some details about their technology stack (OS, database, Middleware)?
- deleted 5y ago[deleted]