Since fbis blocked and can be accessed only via vpn (or maybe via somes rules in chinese fw) why doesnt fb just use their "AI" to correlate ipsrc, x-referrer, languge setting etc. fb collects so much data it seems difficult that this is not in their reach
The video shows just the unlock process plus a (possibly fake) web page with SS7 printed in big letters. Looks much like a PR stunt
These guys of Positive Technologies might want to read at least Wikipedia about SS7. Even if old protocol, it still has common things with OSI 7 layers. You can compare SS7as a sort of IP; the layers above like MAP are used in mobiles and there is no xml encoded for humans to read but XER/BER. In all networks I know there is no SS7 but all is SCTP.
An attack of grabbing SMS text will only work if you are inside the operator's network, which has certainly vulnerabilities especially with peoples PCs that vpn into the core network. But if you are in that position you will probably be interested in many other aspects than just recovering some bitcoins.
BTW I work for a mobile operator; these system trigger alarms when you login and commit a configuration. The you would need to understand a bit of things like AXE or DX200 nodes just to print something.
This was just for some free PR by the authors.
You are correct too web oriented.
Erlang is not an option, pitty because I do distributed apps with Erlang OTP. The closest could be Clojure but the result is the salary of a newly hired zero competence dude
Was fun to try:-)
Hardly new.
Around 1998 I was using Netscape Enterprise Server with Server Side Javascript. It integrated easily with Oracle (and probably other RDBMS). Certainly the JS engine was a bit fragile and could bring the whole server down, but it was also 20 years ago.
too young to remember vax vms uptimes... range of ten years (for clusters not single node)
Adiantum encryption system will be supervised by systemd thus soooo much better security
Since fbis blocked and can be accessed only via vpn (or maybe via somes rules in chinese fw) why doesnt fb just use their "AI" to correlate ipsrc, x-referrer, languge setting etc. fb collects so much data it seems difficult that this is not in their reach
Scrooge McDuck did is successfully years ago :-)
The video shows just the unlock process plus a (possibly fake) web page with SS7 printed in big letters. Looks much like a PR stunt These guys of Positive Technologies might want to read at least Wikipedia about SS7. Even if old protocol, it still has common things with OSI 7 layers. You can compare SS7as a sort of IP; the layers above like MAP are used in mobiles and there is no xml encoded for humans to read but XER/BER. In all networks I know there is no SS7 but all is SCTP. An attack of grabbing SMS text will only work if you are inside the operator's network, which has certainly vulnerabilities especially with peoples PCs that vpn into the core network. But if you are in that position you will probably be interested in many other aspects than just recovering some bitcoins. BTW I work for a mobile operator; these system trigger alarms when you login and commit a configuration. The you would need to understand a bit of things like AXE or DX200 nodes just to print something. This was just for some free PR by the authors.
You are correct too web oriented. Erlang is not an option, pitty because I do distributed apps with Erlang OTP. The closest could be Clojure but the result is the salary of a newly hired zero competence dude Was fun to try :-)
Hardly new. Around 1998 I was using Netscape Enterprise Server with Server Side Javascript. It integrated easily with Oracle (and probably other RDBMS). Certainly the JS engine was a bit fragile and could bring the whole server down, but it was also 20 years ago.