They tested against a live network. Pretty ballsy of the carriers who allowed it! A tip of my hat to them!
(They did it with carrier permission though, before you run off to replicate their findings)
(They did it with carrier permission though, before you run off to replicate their findings)
Probably not. Researchers should comply with any special legal requirements in their jurisdictions. Fortunately, for the purpose of inspecting and validating the vulnerabilities, two MNOs gave us a permission to conduct dynamic security testing on their testbed.
If dangerous, we tested only inside testbed. If not, we tested on the real network.
All tests were permitted by two telcos.