Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ss7]

The tag has no usage guidance.

3
votes
1answer
290 views

SMS based 2FA intercepts

Reddit just revealed that they experienced a security breach as a result of an intercepted SMS based 2FA. Another post on SMS 2FA refers to flaw in the telecom’s ss7 protocol that was used to perform ...
2
votes
0answers
158 views

Is SS7 attack traceable/detectable?

There is a lot of talk about SS7 attacks. Even if old article, but still interesting. But lets say, someone accessed my account which uses two-step authentication (SMS verification method) and I ...
3
votes
1answer
175 views

Does SMS flood cause denial of service even when “blocked”?

Imagine a SMS flood using a few phone numbers. The client blocks the phone numbers using the build in mechanism of the smart phone, and thus does not receive any notifications. Even though the user ...
1
vote
0answers
165 views

How difficult are SS7 hacks? [duplicate]

Out of band communication via SMS has recently been shunned due to SS7 hacks. How likely are these to become more prevalent? I saw this question: Should 2FA over SMS be considered insecure in the ...
8
votes
2answers
3k views

How SS7 attack first enter into SS7 network?

I've read the following article about SS7 attack: https://berlin.ccc.de/~tobias/31c3-ss7-locate-track-manipulate.pdf I have some questions about this kind of attack: Is SS7 attack can be done ...
6
votes
1answer
299 views

Should 2FA over SMS be considered insecure in the wake of recent SS7 attacks?

Design flaws related to SS7 has been known to us for quite a while now but telcos have conveniently discarded the arguments saying that the risk is too low due to the significant investments required ...
3
votes
1answer
256 views

Do SS7-based attacks affect landlines?

I am aware of the risks of SS7 for mobile users. Attackers can get location information, send spoofed texts, cause DoS and intercept phone calls/texts. Do those risks still apply for landlines? There ...
9
votes
2answers
659 views

Is SS7 a threat any more?

I'm reading about an SS7 issue: SS7 flaw allows hackers to spy on every conversation. It seems to me that any phone on the world can be intercepted so the hacker can listen to your phone call or read ...