nanog mailing list archives

Re: Should FCC look at SS7 vulnerabilities or BGP vulnerabilities


From: Josh Luthman <josh () imaginenetworksllc com>
Date: Thu, 16 May 2024 16:05:21 -0400

The FCC has spent the last several years hounding us voice providers over
spam calls.  They've implemented laws.  They have required us to do
paperwork.  Have they been successful in that task?

Now do you think they're going to properly understand what an SS7 or
vulnerability is?

On Thu, May 16, 2024 at 3:53 PM Brandon Zhi <Brandon () huize asia> wrote:

Are APNs like a vpn for mobile devices to access the public internet?
Based on the experience that I used Mobile roaming outside my country. The
provider would connect back to the original country via local providers.


*Brandon Zhi*
HUIZE LTD
www.huize.asia  <https://huize.asia/>| www.ixp.su | Twitter

This e-mail and any attachments or any reproduction of this e-mail in
whatever manner are confidential and for the use of the addressee(s) only.
HUIZE LTD can’t take any liability and guarantee of the text of the email
message and virus.


On Thu 16 May 2024 at 20:27, Sean Donelan <sean () donelan com> wrote:


Should FCC focus on SS7 vulnerabilities or BGP vulnerabilities?

https://www.404media.co/email/79f7367c-bd3c-4bff-ac9f-85c738d08bec/
https://www.fcc.gov/ecfs/document/10427582404839/1

Additional comments from Kevin Briggs: "I have seen what appears to be
reliable information related to numerous other exploits based on SS7 and
Diameter that go beyond location tracking. Some of these involve issues
like (1) the monitoring of voice and text messages, (2) the delivery
of spyware to targeted devices, and (3) the influencing of U.S. voters by
overseas countries using text messages."



On Wed, 15 May 2024, Job Snijders via NANOG wrote:
Dear all,
FYI: https://docs.fcc.gov/public/attachments/DOC-402579A1.pdf



Current thread: