Ireland's efforts to keep residents informed about coronavirus has fallen foul of the same basic SMS vulnerability that one of their British neighbours experienced back in March.
Lulzsec-bod-turned-security-consultant Jake Davis reckoned the Irish government is using an SMS sender name that is vulnerable to spoofing – a process that is simple and straightforward, not that we're going to explain how it's done.
Anyone flying to the Emerald Isle must give their contact details to immigration staff, including a mobile phone number. That number is then sent a text from "gov ie" with details of how to call a doctor and get public health advice if one starts experiencing COVID-19 symptoms. "Fairly standard and responsible stuff," commented Davis.
What was not "standard and responsible", in his view, was Ireland's mobile networks not blocking the sender name from being reused by anyone else at all. As he ..
Support the originator by clicking the read the rest link below.
