It is dangerously easy to hack the worlds phones

https://www.economist.com/science-and-technology/2024/05/17/it-is-dangerously-easy-to-hack-the-worlds-phones

by ikekkdcjkfke • 2 years ago

37 9 2 years ago

IndySun3• 2 years ago

I'm coming at this not knowing enough, but have read many similar articles over the past 20 years or so. Bluntly, why don't these villains, instead of (for example) breaking into highly protected government nuclear facilities, why not just transfer all of 'everyones' money to their bank accounts? (hacks being so easy).

Tanoc• 2 years ago

It's easier to track fund transfers than it is to track small snippets of assets being traded and reassigned. The smaller the pieces and the more of them there are going in all different directions in the first few steps the harder it is to find the end destination. Do this multiple times over multiple steps and you create plenty of buffers, because tracking the theft requires investigating every single possible route the assets could've taken. It's all about how much time you have to obscure the latest evidence before the authorities sort out the previous evidence. Shell companies are the corporate version of this sort of scheme.

IndySun3• 2 years ago

Thank you. But remember, these are villains we're talking about. They would not care if the world knew they had stolen nuclear secrets. They won't care if they are tracked stealing money. Right?

Let's change it to, emptying 'everyone's' bank account; that kind of chaos would pretty much put a billion people in serious trouble almost immediately.

The point is, why go to the trouble of attempting to attack the most guarded?

notepad0x90• 2 years ago

let's say the bank doesn't notice the transfer and revert it back. how will they withdraw the money without getting caught? when you approach the "coupe of million dollars" milestone, humans start reviewing transactions. even with your own money, it isn't unusual to have the cops called on you when withdrawing large sums of money if you don't usually do that.

IndySun3• 2 years ago

They (villains) don't care about being caught, or the money. They just want to disrupt.

kome• 2 years ago

having a smartphone or a cellphone is a security nightmare, but most of the people are willingly choosing this. what is worse, tho, is when you are unwillingly choosing this: I had to buy a smartphone too, just because of my bank. I think it's madness.

fullspectrumdev• 2 years ago

One of the more fun things to note is bad actors don’t need to be a telecoms operator or pay one for access to SS7 - a lot of the software involved for management is horribly insecure and often exposed to the internet by smaller operators.

The biggest barrier to entry for hacking SS7 networks is just gaining the network access. And that gate is often secured with some shoddily written mess of old code.

It is dangerously easy to hack the worlds phones

Related Stories