Puk Number - Gaping Security Hole

[VodacomData]

So my father is overseas and he locked his phone by entering the pin incorrectly 3 times and asked me to sort it out for him. So I called 082111 and selected the PUK option. The automated system just asks you for the cellphone number that u want the PUK number for, and sms's it to you. THATS IT!!

Seems a bit stupid if u ask me? Whats the point of a pin then?

I agree that it is too easy to obtain the PUK number to a SIM if you know the cell number.The only time you would need the PUK number to a SIM you dont know the cell number to , in my opinion is if you up to no good.

I will speak to the guys who deal with the these inquiries and see if any other security stuff can be built in before the PUK is issued.

 

[mercurial]

I've known about this for so many years.
/pats self on back

 

[kilobits]

Here

From the MyBB archives;

http://mybroadband.co.za/vb/showthread.php/257962-Vodacom-WTF-Hands-out-PUK-codes-to-anyone

http://mybroadband.co.za/vb/showthread.php/344131-Point-of-PUK

 

[Jaygee]

Do you know of any updates with regard to this? It is indeed a huge hole in the security integrity of the Sim card, especially when you want to implement security features in M2M products where you want to limit the end user from using the SIM in another device but still have access to the cell number to Call/SMS to that SIM. The fact that it is as simple as knowing the number and making a call to 111 to request the PUK is a huge problem.