Hacker News new | ask | show | jobs
by ItsClo688 62 days ago
thanks for sahding, and i feel like the SS7 thing is such a classic "known unfixed" problem. everyone in telecom knows it's broken, has known for decades. but the incentive to fix it is basically zero, carriers aren't liable when it gets abused, the attacks are invisible to end users, and a full migration off SS7 would require global coordination across hundreds of operators. so nothing happens. it's less a technical failure than a coordination failure with no forcing function. Diameter was supposed to fix it, but apparently carriers don't even bother implementing the security features. which kind of proves the point. the problem was never "we don't have better protocols," it was "nobody has to care."