If You Can’t Trust the Phone Company: A Mock Trial
summary
A mock trial dramatizes a complex breach scenario involving SMS token cloning by a mobile carrier, compromised passwords, an authenticated-user-only vulnerability in a medical lab web service, and ransomware that both blocks test results and allows exfiltration of medical records. The session explains the underlying authentication and web-service vulnerabilities, ransomware behavior, and privacy/liability issues while engaging the audience via polling.
AI-written summary · about
chapters (5)
- 0:00Start
- 0:11Agenda for the mock hearing
- 4:06Title 1.81.5 California Consumer Privacy Act of 2018
- 8:55Poll #1 -Summary Judgment ruling recommendation
- 39:13Post hearing discussion with Judge Beeler
related talks
05mAn Empirical Study of Wireless Carrier Authentication for SIM Swaps
01h 02mWhy using SMS in the authentication chain is risky
56mHacking your Mind and Emotions
37mYour Phone is Not Your Phone: A Dive Into SMS PVA Fraud
40mIntegrating Mobile Devices into your Penetration Testing Program
49mThe Perimeter Has Been Shattered
30mFair game: the ethics of telco fraud
30mAuthentication Strategies to Protect Your Customers and Your Brand from Sophisticated Attacks