From someone else in the article's comments: > if we treated the customer's phone number as a hex representation of ASCII, it spelled something that was recog

From someone else in the article's comments: > if we treated the customer's phone number as a hex representation of ASCII, it spelled something that was recognisable as a command. And the WAF team suggested they ask the customer to change their phone number. Goodness me.