Brave post - the government has jailed people for far less
Brave? Or dumb? Using someone else’s credentials is against the law in most jurisdictions.
I could send any text message from Indian government IDs
11–20 of 46 posts
Re: I could send any text message from Indian government IDs
#12Re: I could send any text message from Indian government IDs
#13Brave post - the government has jailed people for far less
Brave? Or dumb? Using someone else’s credentials is against the law in most jurisdictions.
Intent tends to matter.
I once reported an exposed AWS access key (someone posted it to StackOverflow) to AWS support and they weren't quite sure what to do with it; gave me instructions on how to disable it in the Console, but it wasn't mine.
I gave up after a couple rounds and just committed it to Github; their credential monitoring bot disabled it within seconds.
Re: I could send any text message from Indian government IDs
#14Just doing the needful.
Re: I could send any text message from Indian government IDs
#15Shared secret authentication is pretty much always a bad idea. I'm continually shocked people still use it.
Re: I could send any text message from Indian government IDs
#16He should use this to tell everybody in India to stay hime, wear masks and stop going to mass worship ceremonies that are causing this devastating covid spike.
Re: I could send any text message from Indian government IDs
#17You don't need to hack their website to do this. SMS spoofing has been possible for decades and still is.
Re: I could send any text message from Indian government IDs
#18He should use this to tell everybody in India to stay hime, wear masks and stop going to mass worship ceremonies that are causing this devastating covid spike.
See also: mega churches in the US.
Re: I could send any text message from Indian government IDs
#19Re: I could send any text message from Indian government IDs
#20> You would likely believe it, given the sender ID, wouldn’t you?
No. I absolutely don't believe anyone unknown calling me, no matter who he claims to be, or what the CLIP says, unless I can call back to a public number of the institution he claims to represent. CLIP just isn't secure.
I choose to risk believing for non-essential things, because security is just not convenient. But banks, government, anything where there's well reported fraud going on regularly,... no way.
Calling back is also good, because outgoing calls are automatically recorded by my operator and sent to my email, so if I'm to enter into any agreement, it's better to do it on an outgoing call.