A privacy flaw in Comcast's automated telephone system
1–10 of 33 posts
Re: A privacy flaw in Comcast's automated telephone system
#2Pfft, boring stuff.
Comcast will let anyone get your home address, name, last 4 digits of SSN with just your IP address!
Re: A privacy flaw in Comcast's automated telephone system
#3Pfft, boring stuff. Comcast will let anyone get your home address, name, last 4 digits of SSN with just your IP address!
There was a thread here recently about how it costs 10 bucks to rent out a cellular tower in Malaysia and co-opt a cell phone number as roaming, in order to defeat SMS security 2FA. Experts on HN were saying that the trunk level protocols for cell phone numbers are pretty much worthless when it comes to security. Their conclusion was that: security in this world is so poor that you might as well live with the assumption that there is no real security for public services.
Re: A privacy flaw in Comcast's automated telephone system
#4Pfft, boring stuff. Comcast will let anyone get your home address, name, last 4 digits of SSN with just your IP address!
> Making matters worse, if you then pay the bill on someone else's account, the system prompts you to add yourself as an authorized user and requests the callers phone number, potentially granting them full access to your account.
Uhm yeah sure boring stuff. Can I have your phone number?
Re: A privacy flaw in Comcast's automated telephone system
#5If I read this correctly, you have to spoof the telephone number in order to get the address, and you only get it read out loud so automation isn't trivial.
To me, it doesn't feel like a big deal, but that might be because in Sweden, everyone's [1] addresses are freely available and searchable online, given for example name or telephone number. See [2] and [3] for example.
So are telephone numbers and addresses considered very private in the US? Some comments in the Reddit thread suggest security bounties etc.
[1] Unless you have a protected identity.
Re: A privacy flaw in Comcast's automated telephone system
#6Pfft, boring stuff. Comcast will let anyone get your home address, name, last 4 digits of SSN with just your IP address!
There was a thread here recently about how it costs 10 bucks to rent out a cellular tower in Malaysia and co-opt a cell phone number as roaming, in order to defeat SMS security 2FA. Experts on HN were saying that the trunk level protocols for cell phone numbers are pretty much worthless when it comes to security. Their conclusion was that: security in this world is so poor that you might as well live with the assumpt…
It's ludicrous to me that many services, especially financial, go through the trouble of setting up SMS 2 factor, but not TOTP.
Re: A privacy flaw in Comcast's automated telephone system
#7Pfft, boring stuff. Comcast will let anyone get your home address, name, last 4 digits of SSN with just your IP address!
There was a thread here recently about how it costs 10 bucks to rent out a cellular tower in Malaysia and co-opt a cell phone number as roaming, in order to defeat SMS security 2FA. Experts on HN were saying that the trunk level protocols for cell phone numbers are pretty much worthless when it comes to security. Their conclusion was that: security in this world is so poor that you might as well live with the assumpt…
Do you have happen to have a link?
Re: A privacy flaw in Comcast's automated telephone system
#8Pfft, boring stuff. Comcast will let anyone get your home address, name, last 4 digits of SSN with just your IP address!
> Comcast will let anyone get your home address, name, last 4 digits of SSN with just your IP address!
IP address? Really?
Re: A privacy flaw in Comcast's automated telephone system
#9Earlier quoted context omitted.
There was a thread here recently about how it costs 10 bucks to rent out a cellular tower in Malaysia and co-opt a cell phone number as roaming, in order to defeat SMS security 2FA. Experts on HN were saying that the trunk level protocols for cell phone numbers are pretty much worthless when it comes to security. Their conclusion was that: security in this world is so poor that you might as well live with the assumpt…
Do you have happen to have a link?
Re: A privacy flaw in Comcast's automated telephone system
#10Remember the Time when you just look for an Adress in a Telephonebook?