nanog mailing list archives
Re: gmail security is a joke
From: Jimmy Hess <mysidia () gmail com>
Date: Fri, 29 May 2015 06:17:43 -0500
On Wed, May 27, 2015 at 8:42 AM, Joel Maslak <jmaslak () antelope net> wrote:
I also suspect not every telco validates number porting requests against social engineering properly.
What national wireless provider _does_ validate porting requests against social engineering? As far as I knew, as soon as the gaining provider receives the filled out online form or written form, with the billing address, Or copy of a bill from the old provider printed off from the losing provider's web portal signed off with a forged signature from the scammer (All information that can be derived through pre-texting or social engineering), The gaining wireless carrier can proceed, and will proceed with a simple port without having to call the number for approval. The sufficiently evil scammer will have the wireless number ported to their pre-paid cell phone within 48 hours, and be ready to receive insecure SMS message from the target's online banking service to confirm the second factor for login. -- -JH
Current thread:
- Re: Password storage (was Re: gmail security is a joke), (continued)
- Re: Password storage (was Re: gmail security is a joke) Michael Thomas (May 28)
- Re: gmail security is a joke Saku Ytti (May 26)
- Re: gmail security is a joke Valdis . Kletnieks (May 26)
- Re: gmail security is a joke Christopher Morrow (May 26)
- Re: gmail security is a joke Mark Andrews (May 26)
- Re: gmail security is a joke Owen DeLong (May 27)
- Re: gmail security is a joke Joe Abley (May 27)
- Re: gmail security is a joke Saku Ytti (May 27)
- Re: gmail security is a joke Joel Maslak (May 27)
- Re: gmail security is a joke Rafael Possamai (May 27)
- Re: gmail security is a joke Jimmy Hess (May 29)
- Re: gmail security is a joke Valdis . Kletnieks (May 27)
- Re: gmail security is a joke Octavio Alvarez (May 28)
- Re: gmail security is a joke Blair Trosper (May 28)
- Re: gmail security is a joke William Herrin (May 28)
- Re: gmail security is a joke Rich Kulawiec (May 28)
- Re: gmail security is a joke Joe Abley (May 28)
- Re: gmail security is a joke Peter Beckman (May 29)
- Re: gmail security is a joke Richo Healey (May 29)
- Re: gmail security is a joke Sander Steffann (May 29)
- Re: gmail security is a joke Barry Shein (May 29)