AfterDawn: Tech news

MetroPCS had flaw on site that left personal information vulnerable

Written by Andre Yoskowitz @ 14 Nov 2015 5:00

MetroPCS had flaw on site that left personal information vulnerable According to security researchers Eric Taylor and Blake Welsh, over 10 million MetroPCS subscribers were vulnerable to having their personal information stolen via a flaw in the site's payment page.
Anyone with some know-how and your phone number could have accessed your home address, MetroPCS plan and your phone's serial number.

The flaw brought back memories of 2010 when developer 'Weev' was able to harvest 114,000 iPad user email addresses from a vulnerability in AT&T's website.

Motherboard tested out the flaw before MetroPCS fixed the bug and well before they posted the report. Says the article: "When I tested the flaw, I asked a friend if I could use her as a guinea pig. All I needed to find out her data was use a Firefox plugin to send an HTTP request to MetroPCS' website using her phone number. Once I did that, I saw her full name, home address, the model and serial number of her phone, as well as how much she was paying a month for her subscription. My friend confirmed that the data was accurate."



Most scary was the fact that hackers could have potentially used the information to "clone" the victim's phones and intercept all messages.


Previous Next  
Comments have been disabled for this article.

Latest news

VLC hits milestone: over 5 billion downloads VLC hits milestone: over 5 billion downloads (16 Mar 2024 4:31)
VLC Media Player, the versatile video-software powerhouse, has achieved a remarkable feat: it has been downloaded over 5 billion times.
1 user comment
Sideloading apps to Android gets easier, as Google settles its lawsuit Sideloading apps to Android gets easier, as Google settles its lawsuit (19 Dec 2023 11:09)
Google settled its lawsuit in September 2023, and one of the settlement terms was that the way applications are installed on Android from outside the Google Play Store must become simpler. In the future, installing APK files will be easier.
7 user comments
Roomba Combo j7+ review - Clever trick allows robot vacuum finally to tackle home with rugs and carpets Roomba Combo j7+ review - Clever trick allows robot vacuum finally to tackle home with rugs and carpets (06 Jun 2023 9:19)
Roomba Combo j7+ is the very first Roomba model to combine robot vacuum with mopping features. And Roomba Combo j7+ does all that with a very clever trick, which tackles the problem with mopping and carpets. But is it any good? We found out.
Neato, the robot vacuum company, ends its operations Neato, the robot vacuum company, ends its operations (02 May 2023 3:38)
Neato Robotics has ceased its operations. American robot vacuum pioneer founded in 2005 has finally called it quits and company will cease its operations and sales. Only a skeleton crew will remain who will keep the servers running until 2028.
5 user comments
How to Send Messages to Yourself on WhatsApp How to Send Messages to Yourself on WhatsApp (20 Mar 2023 1:25)
The world's most popular messaging platform, Meta-owned WhatsApp has enabled sending messages to yourself. While at first, this might seem like an odd feature, it can be very useful in a lot of situations. ....
18 user comments

News archive