Puk Number - Gaping Security Hole

[Ice2Cool]

So my father is overseas and he locked his phone by entering the pin incorrectly 3 times and asked me to sort it out for him. So I called 082111 and selected the PUK option. The automated system just asks you for the cellphone number that u want the PUK number for, and sms's it to you. THATS IT!!

Seems a bit stupid if u ask me? Whats the point of a pin then?

 

[ginggs]

So my father is overseas and he locked his phone by entering the pin incorrectly 3 times and asked me to sort it out for him. So I called 082111 and selected the PUK option. The automated system just asks you for the cellphone number that u want the PUK number for, and sms's it to you. THATS IT!!

To whom was the SMS sent?

 

[Ice2Cool]

To whom was the SMS sent?

To the cellphone that i called from.

 

[Scooby_Doo]

To whom was the SMS sent?

Why would it send an sms?

 

[Ice2Cool]

It reads it out to u on the phone but also sends an SMS to the callers phone.

 

[Scooby_Doo]

It reads it out to u on the phone but also sends an SMS to the callers phone.

Right, thought ginggs wanted it to send an sms to the owner of the number

 

[koeksGHT]

Haha someone else noticed.

Only contracts don't work cause you have to speak to a rep.

Otherwise calling 111 will just give you the puk. Easy to just get it

 

[Ockie]

If you steal a phone you are unlikely to ask the owner if you can please have cell number so that he can get the PUK from Vodacoms IVR. This of course excludes phones where the owner saves his own number under "My Own Number"

 

[grim]

If you steal a phone you are unlikely to ask the owner if you can please have cell number so that he can get the PUK from Vodacoms IVR. This of course excludes phones where the owner saves his own number under "My Own Number"

Or you just make a call from his number to your phone and you have his number

 

[azbob]

If you steal a phone you are unlikely to ask the owner if you can please have cell number so that he can get the PUK from Vodacoms IVR. This of course excludes phones where the owner saves his own number under "My Own Number"

 

[hj2k_x]

Haha someone else noticed.

Only contracts don't work cause you have to speak to a rep.

Otherwise calling 111 will just give you the puk. Easy to just get it

I forgot my pin the other day and didn't have to speak to a rep to get my PUK either. It was just SMS'd to the phone I called 111 from

 

[ToxicBunny]

I've noticed this before as well...

Its why my phones have added layers of security on them that Vodacom can't just tell to someone who has stolen the phone.

 

[Ockie]

Or you just make a call from his number to your phone and you have his number

Oh dear. Did not think of that. I would make a really sucky thief

Suppose Vodacom could do away with it....as long as you guys are then willing to go buy new sims everytime you lock up your sim (and this happens often...I get at least 2 pin/puk requests per week)

Then again...if the phone is switched on already for you to make a call to your own cell then you would not need the puk anyway.

 

[azbob]

Oh dear. Did not think of that. I would make a really sucky thief

Suppose Vodacom could do away with it....as long as you guys are then willing to go buy new sims everytime you lock up your sim (and this happens often...I get at least 2 pin/puk requests per week)

Or just improve the security. Random questions etc.

 

[Zenbaas]

Oh dear. Did not think of that. I would make a really sucky thief

Suppose Vodacom could do away with it....as long as you guys are then willing to go buy new sims everytime you lock up your sim (and this happens often...I get at least 2 pin/puk requests per week)

Well if it's true then the current system is completely insecure.

 

[Ockie]

Or just improve the security. Random questions etc.

Think someone mentioned already that it does not work for contract...puts you through to customer care and they will then authenticate you.

 

[hj2k_x]

Think someone mentioned already that it does not work for contract...puts you through to customer care and they will then authenticate you.

No. It doesn't.

 

[Ockie]

No. It doesn't.

Then I dunno.

When phone is lost or stolen line must be locked immediately. When line is locked it does not matter if he has pin or puk. Lock is implemented on network side.

 

[siyya]

Smsing fm to 31050, can get alot of info.

 

[azbob]

Smsing fm to 31050, can get alot of info.

Not ringtones and wallpapers?