Sunday, July 9, 2006

Sprint Wireless security SNAFU

cryocone: Identity leak with Sprint wireless

Someone in their infinite wisdom at Sprint set up an IVR that you can call (intended for internal care reps for identity verification) and get anyone's CPNI/PII by simply keying in their sprint wireless phone number.

Really convenient for Sprint employees and the public -- and really stupid on all counts.

No comments:

Post a Comment