oretoz

There is an API available from many mobile operators called SIM Swap that can be called to find out if the SIM has been swapped. Often these calls are made by Banks to an aggregator (such as Telesign or Twilio) that finds out the mobile operator (e.g. Verizon or AT&T) that the customer belongs to and calls SIM Swap API on that operator. There is currently no universal app for that purpose but it can be developed. See CAMARA Project for latest specifications of this and many other APIs.

As others have mentioned, SIM Swap attacks are very common where the attacker impersonates the victim and convinces the mobile operator to transfer the victim’s phone number (known as MSISDN in telecom parlance) to the attacker’s SIM. If you Google SIM Swap, you will find many instances of it.

From that moment onwards, all the 2nd factor SMS OTP go to the attacker.

There are APIs that are provided by mobile operators via aggregators such as Telesign, Prove, Vonage, Twilio etc. that can be used to check if a SIM Swap has happened recently on that phone number. That API is used by fintech companies and others e.g. when they want to check if a fund transfer is to be allowed or flagged up.

After trying to reach out to several of their key people on LinkedIn, I tried to reach out to them via a form on their site. This was to GIVE THEM SOME BUSINESS. Never heard anything back. This was for Telco related product that we have so not sure if it is just the Telco people in GCP who are this bad or the rot is wider than that.

Exactly same for me too. I watched his interview with Aarthi and Sriram of a16z yesterday and the more I tried to understand him, more he seemed like not just a BS peddler but deluded as well. May be it is just the two of us?

ccache is used together with distcc at the current place I am working at. Started digging at how these two work as I thought there is still room for improvement in our build times that can vary between 10 minutes to 1 hour. It is a huge code base, easily more than a million lines and around 18k files. But had to stop as there were way too many features to develop and bugs to fix. Also, management does not see that kind of work as useful so no point fighting those battles.

Brings back memories. Fresh out of college, I was given the additional job of being the Clearcase and Unix admin for my team. Not that I had any special skills but others didn't know a few Unix commands (System V) that I did. But Clearcase was such a good product and was used in the Telecom companies that I worked for (Motorola, Lucent etc.) It was owned by Rational at that time and if memory serves me right, were acquired by IBM.

To this day, I find Clearcase's way of doing things is the better way to do version control. Git, in comparison, kind of feels alien and I could never really get the same type of comfort on it.

Here are the key differences between 5G and Wifi: 1. Dedicated vs shared spectrum. Though all big countries have shared spectrum initiatives for 5G too but it is still not a free for all like Wifi. So interference-wise 5G might be better for some use cases. Have heard about that in several shipping ports where Private 5G is deployed 2. Security. Due to the usage of SIM but Wifi security is good too 3. Range - though most of 5G is in comparable frequency ranges with Wifi, there is a huge range of powers at which 5G base stations can transmit so range is possibly larger for 5G

But it all depends on use-case and there is no clear winner for all situations.

Very interesting indeed. You seem to know about this. Do you have any links where I can find more details (which is not easily Googleable?

What an amazing quote! Thanks for sharing.

Thank you for these wonderful resources. I had no clue.

Thanks. Sounds interesting. Will google it.