Skip to content
0:00 / 0:00

#ss7#telephony#spyware

Your phone is not as secure as you think.

Veritasium

21M subscribers • 26 videos on Hallway

YouTube
  • Recommended by 2 people: 2 in engineering communities.

Beginner. No background in the topic needed.

10M views2 years ago2 recommendations

SecurityNetworking and protocolsPrivacy and surveillanceExploits and vulnerabilities

An explanation of how the global Signalling System No. 7 network allows hackers to intercept calls, messages, and locations.

Can you trust your phone? Head to brilliant.org/veritasium to start your free 30-day trial and get 20% off an annual premium subscription. A huge thank you to Linus Sebastian and the team at Linus Tech Tips - check them out at @LinusTechTips A massive thank you to Alexandre De Oliveira and Karsten Nohl (aka @hackingmatters) for making this demo possible. Karsten has made a great follow-up video on the subject, which you can watch here: youtube.com/watch?v=miXRoy-5LLo A special thanks to Crofton Black at Lighthouse Reports, Cathal Mc Daid at Enea, and James Hobson at @hacksmith I hacked Linus! How Steve Jobs and Steve Wozniak hacked the telephone network Early history of the telephone The kidnapping of Sheikha Latifa How Signalling System No. 7 works Why SS7 is vulnerable to hacking How hackers gain access to phones How I was able to spy on Linus’ phone How hackers can intercept text messages How your location can be tracked via SS7 How to protect your phone from hacking ▀▀▀ Special thanks to our Patreon supporters! Join the community to help us keep our videos free, forever: ve42.co/PatreonDE Adam Foreman, Albert Wenger, Anton Ragin, Balkrishna Heroor, Bertrand Serlet, Bill Linder, Blake Byers, Bruce, Burt Humburg, Dave Kircher, David Johnston, Evgeny Skvortsov, Garrett Mueller, Gnare, gpoly, I. H., Jack Cuprill, John H. Austin, Jr., john kiehl, Juan Benet, KeyWestr, Kyi, Lee Redden, Marinus Kuivenhoven, Matthias Wrobel, Meekay, meg noah, Michael Krugman, Orlando Bassotto, Paul Peijzel, Richard Sundvall, Sam Lutfi, Tj Steyn, TTST, Ubiquity Ventures and wolfee If you’re looking for a molecular modeling kit, try Snatoms, a kit I invented where the atoms snap together magnetically - ve42.co/SnatomsV ▀▀▀ References: Black, C. (2020). Spy companies using Channel Islands to track phones around the world. The Bureau of Investigative Journalism - ve42.co/SpyTBIJ It is dangerously easy to hack the world’s phones via The Economist - ve42.co/EconHack Blake, H. (2023). The Fugitive Princesses of Dubai. The New Yorker - ve42.co/DubaiNY McDaid, C. (2021). How Surveillance Companies Track You Using Mobile Networks. media.ccc.de - ve42.co/McDaid2021 Engel, T. (2014). SS7: Locate. Track. Manipulate. media.ccc.de - ve42.co/Engel2014 Nohl, K. (2014). Mobile self-defense. media.ccc.de - ve42.co/Nohl2014 How Cell Service Actually Works via WendoverProductions - ve42.co/CellWendover How Telephone Phreaking Worked via The 8-Bit Guy - ve42.co/8BitGuy Transmission Lines: Part 1 An Introduction via TheSiGuy - ve42.co/TheSiGuy The Step-By-Step Switch via AT&T Tech Channel - ve42.co/SwitchATNT Hacking Your Phone via 60 Minutes - ve42.co/60minHack Rosenbaum, R. (1971). Secrets of the Little Blue Box. The Esquire Magazine - ve42.co/Rosenbaum1971 Black, C. et. al. (202

Why it's here

2 people recommend this

What people say. Recommended to show why SMS is insecure and easily hijacked via SS7 vulnerabilities.

u/tiagojsagarciain r/node • Recommends

On “SMS as sole login method without password”

you are not. watch [video

u/KaelonRin r/node • Recommends

On “SMS as sole login method without password”

SMS is even easier to hijack than any of those ways. Any bad actor can just pay for a SS7 connection (SS7 being the global telephone network, it's like internet for phone providers) and pretend to be someone else, intercepting their calls and SMS messages, and can even get your live location if your phone provider hasn't taken precautions against that. It's ridiculously easy and there's a video on it if you're interested.

u/Safeword_Broccoliin r/programming • Mentions

On “Passwordless login via email OTP is that a good option?”

Did you know you can fool your phone company into sending other people's sms to you? link to this video