Compromising online accounts by cracking voicemail systems
1–10 of 10 posts
Re: Compromising online accounts by cracking voicemail systems
#2Maximum amount of digits I’ve ever seen for a cellular VM system is 11 (among the big public companies). I believe Sprint can handle up to 7, and Verizon allows up to 10. Of course these are digits with no more than 10 combinations for each slot instead of the 70+ alphanumeric offers.
Re: Compromising online accounts by cracking voicemail systems
#3Maximum amount of digits I’ve ever seen for a cellular VM system is 11 (among the big public companies). I believe Sprint can handle up to 7, and Verizon allows up to 10. Of course these are digits with no more than 10 combinations for each slot instead of the 70+ alphanumeric offers.
I'm logged into Verizon Wireless and it won't let me go beyond 4 digits.
Re: Compromising online accounts by cracking voicemail systems
#4I wonder how many people use the same PIN for their voicemail as for their bank accounts?
Re: Compromising online accounts by cracking voicemail systems
#5What is this for? I feel like my voicemail box has nothing of value in it.
For things that require 2FA they will call or SMS but do they really leave a message if they call and you don't pick up?
Re: Compromising online accounts by cracking voicemail systems
#6What is this for? I feel like my voicemail box has nothing of value in it. For things that require 2FA they will call or SMS but do they really leave a message if they call and you don't pick up?
He demos it working on several popular sites.
Re: Compromising online accounts by cracking voicemail systems
#7I saw this live at defcon and it was honestly my favorite talk of the whole con. VMB hacking was somewhat oldschool even in the nineties yet it’s even more powerful today.
If you get a chance, grab his talk from the defcon media server - well worth it.
Re: Compromising online accounts by cracking voicemail systems
#8What is this for? I feel like my voicemail box has nothing of value in it. For things that require 2FA they will call or SMS but do they really leave a message if they call and you don't pick up?
He said several sites use your voicemail for password reset
Re: Compromising online accounts by cracking voicemail systems
#9The number of people who need to access voicemail from any device except the phone itself is tiny.
Just disallow it by default.
Problem solved.
Re: Compromising online accounts by cracking voicemail systems
#10The phone network is not designed to be secure.
Stop papering over gaps and trying to use it as if it were.