A privacy flaw in Comcast's automated telephone system • Hacker News Board

Re: A privacy flaw in Comcast's automated telephone system

#31

Post by goldenkey » Thu, Apr 12, 2018, 6:14 PM UTC

fyfy18 wrote: post #7

goldenkey wrote: post #3

Earlier quoted context omitted.

There was a thread here recently about how it costs 10 bucks to rent out a cellular tower in Malaysia and co-opt a cell phone number as roaming, in order to defeat SMS security 2FA. Experts on HN were saying that the trunk level protocols for cell phone numbers are pretty much worthless when it comes to security. Their conclusion was that: security in this world is so poor that you might as well live with the assumpt…

Do you have happen to have a link?

I think this was it:

https://news.ycombinator.com/item?id=16771649

Re: A privacy flaw in Comcast's automated telephone system

#32

Post by tjoff » Thu, Apr 12, 2018, 9:28 PM UTC

htgb wrote: post #5

If I read this correctly, you have to spoof the telephone number in order to get the address, and you only get it read out loud so automation isn't trivial. To me, it doesn't feel like a big deal, but that might be because in Sweden, everyone's [1] addresses are freely available and searchable online, given for example name or telephone number. See [2] and [3] for example. So are telephone numbers and addresses consi…

You can just say that you want an unlisted number, it is free. So lots of people and numbers are not searchable.

Unless you have access to facebooks internal database, because surely one of your friends have installed facebook...

Re: A privacy flaw in Comcast's automated telephone system

#33

Post by MobutuPehuenche » Thu, Apr 12, 2018, 10:05 PM UTC

ryanlol wrote: post #2

Pfft, boring stuff. Comcast will let anyone get your home address, name, last 4 digits of SSN with just your IP address!

That's not amenable to bulk, automated harvesting however, unless you've compromised their internal network.