3 ms·
This is fun to watch. I was in a project which did some SS7 integration and feel for the podcasters trying to get anywhere looking at some incomprehensible ITU
by jimmySixDOF 2y ago
This is fun to watch. I was in a project which did some SS7 integration and feel for the podcasters trying to get anywhere looking at some incomprehensible ITU reference spec. SS7 is the original out of band management and runs through the telecom system like Cobalt runs through the banking system. Saying it is an attack vector though is like saying the Swift network is an attack vector because anyone in the network is a trusted end point and can issue instructions. Most of the abuse points are from state level actors who already have other tools if this one went away and as for a darkweb hosted SS7 traffic injection as a service offering ok but it's probably not scalable or stable when its around at all. BGP has just about all the same problems for just about all the same reasons.
- zozbot234 2y agoWe don't say "state level actors" anymore, the new endorsed terminology is 'mercenary attacks'.
- mananaysiempre 2y ago> BGP has just about all the same problems for just about all the same reasons. It took a long time, but ROA is getting some traction (at least around the RIPE region, can’t say anything around ARIN). There is also a large complement of publicly accessible looking glasses that ensures BGP shenanigans don’t stay invisible for long. As far as I know, neither of those applies to SS7.