Hacker News Reader

Comment by exhilaration | Hacker News Reader

The messages reveal that each time LAPSUS$ was cut off from a T-Mobile employee’s account — either because the employee tried to log in or change their password — they would just find or buy another set of T-Mobile VPN credentials. T-Mobile currently has approximately 75,000 employees worldwide.

As a T-Mobile customer, this does not inspire confidence...

View on HN

Been happening at t-mobile since like 2004

> Hollywood’s hacker war began on February 19, 2004 with a simple phone call. It happened at a T-Mobile store near Los Angeles. The caller told the salesperson he was from the T-Mobile headquarters in Washington. “We heard you’ve been having problems with your customer account tools?” The caller said. “No, we haven’t had any problems really,” the clerk replied, “just a couple slowdowns. That’s about it.”

> “Yes, that’s what is described here in the report,” the caller replied. “We’re going to have to look into this for a quick second.”

> “All right, what do you need?” Then he dutifully gave the caller the company’s internal web site for managing customer accounts —

https://www.wired.com/2015/11/the-hacking-of-hollywood/

tmobile is terrible and I loathe them but are the alternatives better?

is twilio viable for personal cell use?

I will say that, as someone who knew the above mentioned hacker when I was underage, ATT and Verizon methodically train their employees on pretexting and other social engineering attacks. While they may have their flaws, they both have a culture of security and privacy that is completely different from TMOB.

There was a Darknet Diaries episode recently[0] that focused on a guy who frequently did phone scams, and he said Verizon was the most expensive to hack because you had to basically pay a bribe to get into their systems.

[0] https://darknetdiaries.com/episode/112/

ffs, stop using cell phones. this goes double for smart phones.

Your landline provider also has fallible CSRs.

Webmail providers don't even have service, which can be a curse as much as it is a blessing

Anyone can commit megafraud against you by filing a USPS change of address form on your behalf to intercept all your paper correspondence, not to mention the rampant straight up package theft the past few years.

We need a more comprehensive plan than just 'dont use phones'. As long as correspondence has value, someone is going to try and steal it.

My who? I don't have a land line.

That’s not a real solution.

It is, in the most literal sense.

Twilio's "Programmable Wireless" product does not allow phone calls, and actually uses T-Mobile in the US.

So no, it's not viable at all.

Surprising the guy from Sony mentioned in that article who called it a, “valid business decision to accept the risk of a security breach”

Still works there in the same capacity: https://www.mesaonline.org/conferences/with-leadership-award...

Reply on news.ycombinator.com