According to a new report from MobileSyrup, a hacker has uncovered a vulnerability in Freedom Mobile’s customer login system. This means that Freedom Mobile customers could be at risk of hackers gaining access to their personal information such as phone number, call history, and address.
The hacker, who goes by the username NullHumanity, showed a screenshot of code on a subreddit that appears to show them successfully brute-forcing user logins.
The login system is “forced to the Phone Number/PIN model” which cannot even be changed if the customer calls support. This makes it really easy to brute force logins because there are only 10,000 possible combinations of four-digit PINs and phone numbers are fairly easy to access.
“There are lots of services out there to identify carrier numbers.”
“A phone number is predictable and a 4 digit PIN isn’t secure. Figuring out matching sets can be automated easily.”
Want to see more of our stories on Google?
P.S. Want to keep this site truly independent? Support us by buying us a beer, treating us to a coffee, or shopping through Amazon here. Links in this post are affiliate links, so we earn a tiny commission at no charge to you. Thanks for supporting independent Canadian media!
Thanks.
Just changed my PIN. They won’t be able to guess it cuz I used opposite thinking so to fooled them.
Guessed it… 1234
Ha!
You are sooooooo wrong!
It’s 4321. So there.
another dumb person here.. brute-forcing means they used an automated script to try every combinations from 0000 to 9999. “using opposite thinking” has nothing to do with brute-forcing method. lol
Exactly! This is why using PINs is dumb… but not as dumb as only allowing four digits in a PIN.
for such a young carrier, this type of stuff is not good. They better shape up
One of the most annoying questions I hear is “are there real hackers?” or “Can i get a real hacker?” or “Where can I get a hacker ?” Well, I’m going to tell you this TOP SECRET thing I found, and trust me he is the answer to all your questions, he is an ethical hacker, reliable and affordable,
I know this because I’ve have made use of his services a lot such as hacking a cell phone, hacking into a website, helping me boost my credit score and clearing my bank debt and he has never dissapointed me for once. I have also reffered him to my friends who also required services of a genuine hacker and they’ve been testifying to his good works. Stop being scammed by these fake hackers and contact a real one.