3 ms·
I've worked for two UK telcos. There is no technical measure which you can apply. Locking your SIM prevents someone from physically stealing the card and putti
by edent 3y ago
I've worked for two UK telcos. There is no technical measure which you can apply.
Locking your SIM prevents someone from physically stealing the card and putting it in a different device - unless they know the PIN which protects it.
But that isn't the attack here.
The phone number does not belong to you - the network operator defines which SIM it points to. So a suitably authorised person at the telco can point the number to a new SIM card. That's helpful if you've lost your SIM but bad if an attacker wants to divert your number.
The best thing you can do is set a strong password on the account you have with the operator. You can also try ringing them and pretending to be you - see if they'll initiate a swap without proper authentication. If they do - move your number to a more reputable provider.
But there's nothing you as an individual can do to prevent a corrupt employee making the change without authorisation.
- the-chitmonger 3y agoI never thought about pentesting my service providers - sounds fun and useful! I'll try this the next time I have a moment.