<story><title>A hacker got all my texts for $16</title><url>https://www.vice.com/en/article/y3g8wb/hacker-got-my-texts-16-dollars-sakari-netnumber</url></story><parent_chain><item><author>heroprotagonist</author><text>I tried to get T-Mobile to stop giving my location to anyone that hits their APIs with a &amp;#x27;Yes I have permission&amp;#x27; flag set.&lt;p&gt;There&amp;#x27;s no opt-out for it, and no enforcement of the permission requirement.  Their support had me snail mail a letter to some PO box.  I never got a response.&lt;p&gt;And now they&amp;#x27;re going to start outright selling their customer activity after forcibly un-opt-outing* everyone who opted out in their privacy settings previously..&lt;p&gt;*un-opt-outing --  ??? I don&amp;#x27;t know what to call this.  It&amp;#x27;s not &amp;#x27;opting-in&amp;#x27; since nobody has a choice.. &amp;#x27;resetting user selection without notification or consent&amp;#x27; seems too mild and wordy.</text></item><item><author>Mandatum</author><text>In Australia it&amp;#x27;s mandated you&amp;#x27;re sent a message before rerouting or migrating to another provider. Surprised this isn&amp;#x27;t enforced in the other countries, it costs next to nothing to implement and is just an additional step in the account migration process.&lt;p&gt;I&amp;#x27;d love to see companies allow for opt in additional security measures, like banks or telco&amp;#x27;s calling me - having a verbal password to confirm things, that level of security seems to only be available to VIPs.</text></item></parent_chain><comment><author>albrewer</author><text>T-Mobile has such shitty IT, infrastructure, and security practices.&lt;p&gt;My last experience with them caused me to switch away from them permanently. I switched away from them after getting SIM jacked, with real money stolen from me. Happened exactly like in this article[0].&lt;p&gt;Another incident happened where my online account was merged with someone else&amp;#x27;s in California (I&amp;#x27;m in Texas). Our billing information was merged, with the others paying for the whole account. I couldn&amp;#x27;t make changes online- only after sitting on hold and explaining what happened was I able to get the whole situation unfucked, but there&amp;#x27;s no telling what amount of my data still lives in that other account.&lt;p&gt;Come to think of it, my first experience with T-Mobile was as a Radio Shack employee, circa 2010. When a customer came to the store to pay their T-Mobile bill with cash, if I took too long to enter all the data into their awful online portal the money would sometimes go to a completely different person&amp;#x27;s account. Many hours were spent on the phone with the local and regional rep resolving multiple instances of this happening.&lt;p&gt;[0]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.vice.com&amp;#x2F;en&amp;#x2F;article&amp;#x2F;3kx4ej&amp;#x2F;sim-jacking-mobile-phone-fraud&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.vice.com&amp;#x2F;en&amp;#x2F;article&amp;#x2F;3kx4ej&amp;#x2F;sim-jacking-mobile-ph...&lt;/a&gt;</text></comment>
<story><title>A hacker got all my texts for $16</title><url>https://www.vice.com/en/article/y3g8wb/hacker-got-my-texts-16-dollars-sakari-netnumber</url></story><parent_chain><item><author>heroprotagonist</author><text>I tried to get T-Mobile to stop giving my location to anyone that hits their APIs with a &amp;#x27;Yes I have permission&amp;#x27; flag set.&lt;p&gt;There&amp;#x27;s no opt-out for it, and no enforcement of the permission requirement.  Their support had me snail mail a letter to some PO box.  I never got a response.&lt;p&gt;And now they&amp;#x27;re going to start outright selling their customer activity after forcibly un-opt-outing* everyone who opted out in their privacy settings previously..&lt;p&gt;*un-opt-outing --  ??? I don&amp;#x27;t know what to call this.  It&amp;#x27;s not &amp;#x27;opting-in&amp;#x27; since nobody has a choice.. &amp;#x27;resetting user selection without notification or consent&amp;#x27; seems too mild and wordy.</text></item><item><author>Mandatum</author><text>In Australia it&amp;#x27;s mandated you&amp;#x27;re sent a message before rerouting or migrating to another provider. Surprised this isn&amp;#x27;t enforced in the other countries, it costs next to nothing to implement and is just an additional step in the account migration process.&lt;p&gt;I&amp;#x27;d love to see companies allow for opt in additional security measures, like banks or telco&amp;#x27;s calling me - having a verbal password to confirm things, that level of security seems to only be available to VIPs.</text></item></parent_chain><comment><author>Sleepytime</author><text>I haven&amp;#x27;t heard anything about a t-mobile api leaking that data and my searches doetsn&amp;#x27;t return anything of value, can you provide more details?</text></comment>