3 ms·
Kind of... The AT&T data wasn't public, Weev & Co. had to build a script to generate plausible ICCIDs which they then 'challenged' the AT&T servers with the URL
by mikeyouse 5y ago
Kind of... The AT&T data wasn't public, Weev & Co. had to build a script to generate plausible ICCIDs which they then 'challenged' the AT&T servers with the URL containing the ICCID. If it was a valid iPad ICCID and registered with AT&T, the server would reply with the email address registered to it.
That seems materially different to just F12ing a website and seeing plaintext Social Security numbers.