Discover and read the best of Twitter Threads about #linuxdays
Most recents (1)
Two guys from CZ have stolen $30k from Vodafone CZ customers by logging in using random phone numbers and password 1234 (Vodafone's password is just 4-6 digits). They got in quite a few customer accounts. It's possible the password 1234 was even set by VF customer representatives
... because some customers didn't even know they can log in. Customers now technically owe the stolen money to Vodafone and guess what, Vodafone wants them to pay because they had a weak password(!) which could even be set temporarily by VF(!) They even sent a debt collector(!).
Vodafone says your password is your responsibility and points to ToS. Bad guys were even able to get new SIM cards because they knew a phone number and a password. No additional checks. This article describes the situation but it's in Czech zpravy.idnes.cz/vodafone-krade…
Vodafone, WTF
Vodafone, WTF
