Verizon Users SMS Records Exposed

Last month a security researcher discovered a flaw in the Verizon Wireless website that allowed subscribers to see people’s SMS history.[1] Users coudl easily alter URL to access the SMS records of other users. Verizon has resolved the problem and assures The Verge that no customer records were impacted.[2] Apparently, the app the ran the SMS record search failed to match the requested record against the user’s registered number. Users simply retyped the final digits of the URL with the number that they wanted to access. See below: https://wbillpay.verizonwireless.com/vzw/accountholder/unbilledusage/UnbilledMessaging.action?d-455677-e=2&1548506v4671=1&mtn=5555555555 This problem has been resolved, but it might be an encouragement for businesses to revisit their online apps and make sure the apps are not exposing any vital data. [1] Dennis Fisher. “Simple Bug Exposed Verizon Wireless Users’ SMS History.” October 21, 2013 [2] Russell Brandom. “Verizon glitch allowed access to texting data from any number.” October 21, 2013

The post Verizon Users SMS Records Exposed appeared first on Integracon Technologies Blog – Computer Support in Knoxville, TN.