AT&T, T-Mobile Customer PINs Left Exposed by Security Flaws
Two different security flaws affecting the customers of AT&T and T-Mobile were revealed this week. The security gaps could have given hackers access to customer account PINs, which would in turn allow them to potentially hijack the customers' SIM cards. AT&T customers were left vulnerable by the insurance provider Asurion. When initiating claims through Asurion's web site, hackers could have gleaned PINs through a form that failed to have a limit on attempts to enter the PIN correctly. This opened the door for brute-force attacks. T-Mobile customers were left vulnerable by the Apple Store app on iPhones. The issue left an opening on a web page that bridged the Apple Store with T-Mobile's account verification system. Similar to the Asurion issue, the Apple Store didn't place a limit on the number of attempts for PIN entry. This also permitted a brute-force attack to guess the number. Both Asurion and Apple resolved the lapses after they were brought to their attention. The T-Mobile vulnerability left some 77 million customers exposed. The number of customers impacted at AT&T is not known. SIM hijacking allows hackers to essentially copy the identity of a legit phone that can then be used to verify identify in apps and services that used SMS-based two-factor authentication.
Jan 8, 2019
ROKiT is a new line of affordable unlocked phones accompanied by a unique range of health and life services for what it calls "transitionals", which means people between jobs, people struggling socioeconomically, and anyone without adequate health insurance. The lineup includes two very basic feature phones and three Android models.
Jul 21, 2020
LG today finally revealed the US launch details for its design-centric flagship phone for 2020, the Velvet. The Velvet will be offered by all three major US carriers, starting with AT&T tomorrow.
Jul 22, 2020
Samsung today announced the Galaxy Z Flip 5G, a variant of the company's folding-screen, clamshell-style phone that adds sub-6 GHz 5G and a faster processor, but is otherwise similar to the 4G version. In the US, it will be available for $1,450 starting August 7th from AT&T and T-Mobile, and unlocked from Samsung, Amazon, and Best Buy.
Jul 13, 2020
US carriers have launched a flurry of new entry-level phones from LG and Samsung in recent weeks. The phones include three new models from each of the two manufacturers.
Jun 15, 2020
Samsung's new mid-range 5G phone, the Galaxy A71 5G, will be available from T-Mobile and Sprint this Friday for $600. Samsung has also made it official that both Verizon and AT&T will offer the phone "later this summer", and that it will also be available unlocked.