Subscribing someone to a content service without their consent?

ajax

Executive Member
Joined
Oct 29, 2003
Messages
6,176
Reaction score
577
Location
Stellenbosch
WASPS claim that it is impossible to subscribe someone else to their services because it requires user intervention.

See for example the claim made here. I got subscribed to them without my consent, see here. It was found that their subscription system swopped a 2 for a 9 and that the problem occurred regularly. See this post.

A colleague of mine nearly got subscribed to Love Guru. A Welcome message was sent to his phone but billing luckily got blocked by Vodacom's double-opt in mechanism. The WASP, Integrat, blamed it on a technical error. For a description of what double opt-in is, see the quoted part in this post.

So here then is conclusive proof that you can subscribe someone without their consent.
I found an add for Bestcoolmobile circled in red here below:

bestcoolmobile1.jpg

Clicking the link routes to this page below:

bestcoolmobile_begin.jpg

I entered my cell number and then it asks for a 4 digit password. (I had a few other simcards handy and entered their numbers as well just to check. Each time a 4 digit password is sent via sms to the cell phone number entered.)

bestcoolmobile_enterpass1a.jpg

I entered random numbers and the server allowed multiple retries:

bestcoolmobile_enterpass2a.jpg

EDIT: Some details removed due to objections from fellow forumites.
After trying several different pin codes (of course, I knew the pin code already, just had to check if I could try ad infinitum) after a while I got signed up.
Welcome! U have joined Tones Club. 3 tones + 2 wallpapers per week R4,99/day.Stop?send stop tones to 31606 Help:0110621402.TotalTim

It took 971 tries to hit the correct pin code of 5971.

Since only 4 digits are required the number of possibilities is 10000. If I want to subscribe someone to this "service", it will take a maximum of 10000 retries.

This is why double-opt in MUST be implemented by ALL the networks.

By the way, the above "service" is also run by Integrat. Seems their subscription systems, like Kulaville's, are in need of serious overhaul!

EDIT: Also, I don't condone taking revenge on anybody. I just wanted to expose the lies and corruption of this detestable industry since I was a victim myself.

EDIT: Due to objections, I had to remove some details. Apologies.
 
Last edited:
Here's another one. A very similar procedure required retries of a 4 digit pin code and no other verification method. Many WASPS use a procedure where you have to send a text message from your cell.

Sidenote: To find more of these ads for other content charge services, go to this site and just enter any telephone number to search. Each new number search brings up a new add. I probably found some 6 to 8 different ads for content services.

So here is another add: Like2Flirt

like_to_flirt_add1.jpg

Entered my test cell and got to this page where I started retrying different pin codes.

LikeToFlirt_pin1.jpg

After a couple of thousand pin code attempts the page displays the following (of course I already had the pin code but just wanted to check how many times I could try):

LikeToFlirt_pin_fin1.jpg

I received an sms:
Welcome to www.Like2flirt.com the No.1 mobile dating site in Africa. R7/day. Send STOP to 31307 to stop. support:0861106472

R7 airtime is gone.

This one is run by Mira networks. I wonder what will happen if I lodge a WASPA complaint?

EDIT: Removed some details due to objections received.
 
Last edited:
Does the recipient get 1000s of SMSs with the pin when you are testing this?

No. He only gets a pin when entering his cell. The retries are not communicated to the cell at all. The retries are done after the cell number has been entered. The websites just wait for the right pin.
 
Here's another one. A very similar script required retries of a 4 digit pin code of just over 3000 retries.
....
This one is run by Mira networks. I wonder what will happen if I lodge a WASPA complaint?

Your doing a brute force attack with the intention to sign up.

The whole idea of the pin confirmation started because of fat finger trouble/transposition error on the sign up forms.
 
Subscribing someone else really is a grade A d!ck move.

Probably also illegal...not that that seems to scare anyone in SA anymore.
 
ah... and if you go to the first page and enter the same number over and over?

Haven't tried it much. The same pin code got sent when I entered my number in the bestcoolmobile case.

Your doing a brute force attack with the intention to sign up.
The whole idea of the pin confirmation started because of fat finger trouble/transposition error on the sign up forms.

I haven't done any "attacks". I am just showing this whole system of signing up is insecure and it's time that the signups and verifications be improved to ensure that "technical problems" and "accidental signups" don't cause the public to get robbed blind.

There should be no possibility of singing up without the user sending a confirmation reply to his own network to confirm that billing can go ahead. Period.

EDIT: How difficult would it have been for the coders of these signup pages to add a simple max. retries lockout to the signup page? It just testifies again of a don't care attitude.
 
Last edited:
I have also asked the mods to change the thread title a bit. Apologies again. I was too hasty!!
 
Ajax, did you know you get a different message when doing an attempted subscribe with Vodacom numbers? Must be from the double opt in system:

spam.jpg
 
Ajax, did you know you get a different message when doing an attempted subscribe with Vodacom numbers? Must be from the double opt in system:

Exactly. Impossible to circumvent. The user must respond YES to Vodacom's sms.

When my contract runs out with Cell C, this would be a good reason to port back to Vodacom. I don't want anything to do with these "services".
 
Top
Sign up to the MyBroadband newsletter
X