Technology Q Link Wireless made private customer information accessible with just a phone number

04:25  10 april  2021
04:25  10 april  2021 Source:   theverge.com

Oppo Demonstrates Its Own Wireless Charging Tech, but Don't Expect to Walk Away From the Charger

  Oppo Demonstrates Its Own Wireless Charging Tech, but Don't Expect to Walk Away From the Charger The tantalizing promise of true wireless charging—not just plopping your phone down on a charging pad—feels even more real as companies like Xiaomi, and now Oppo, demonstrate prototypes of their respective approaches to the technology. Although if Oppo’s wireless charging ever reaches consumers, your phone might still feel as restricted as it does with a cable attached. Your browser does not support this video Through the company’s Weibo account (a Chinese microblogging website not unlike Twitter), Oppo shared a video to coincide with Mobile World Congress, Shanghai, which gets underway today.

A mobile carrier allowed anyone with one of its customers phone numbers to access their personal information, including name, address, phone number, and text and call history, according to a report by Ars Technica. The carrier, Q Link Wireless, claimed to have over two million customers in 2019.

  Q Link Wireless made private customer information accessible with just a phone number © Illustration by Alex Castro / The Verge

Ars Technica noted a Reddit post saying that the app used by the carrier and its subsidiary Hello Mobile never asked for a password or any identifying information when the user was logging on with a phone number. Looking through the reviews, there are references to the poor security practices (to put it mildly) going back to December of 2020. While it’s unclear when the credential-less login system appeared, there is an update note from two years ago that mentions an “updated login process.”

The five Vs of customer data platforms

  The five Vs of customer data platforms Customer Data Platforms (CDP) are the hottest marketing technology today, offering companies a way to capture, unify, activate, and analyze customer data. There are five critical things to think about when developing a successful CDP strategy. Turning Big Data into Business Insights

A ton of information was available in the app, which didn’t ask for a password

The carrier has reportedly fixed the issue — though it seems it may have done so by just turning off logins to the app altogether. Before the change, Ars was able to see, but not change, a bevy of information from a Hello Mobile customer who volunteered their phone number, including their name, address, account number, email address, and which numbers they’d contacted or been contacted by. The last one is probably the most sensitive — while the contents of texts or phone calls weren’t shown, there’s still a lot of information that can be gleaned from knowing who you talked to and when you talked to them.

The app’s description mentions that it allows users to add more minutes or data to their plans, but it’s unclear if that required extra authentication. Regardless, there’s still a ton of information that was available to anyone able to get the phone number of one of Q Link Wireless’ customers. Reportedly, Q Link Wireless hasn’t notified its customers that their information had been accessible — which seems to be a worrying trend among companies that leak user data.

Ars found no evidence that the security vulnerability was widely exploited, but having to worry about others having access to a ton of their sensitive data isn’t something that anyone needs.

Q Link Wireless didn’t immediately reply to a request for comment.

Sony WF-1000XM4 review: These noise-canceling earbuds are really damn good .
While they cost $50 more than their predecessors, Sony's new WF-1000XM4 may just be the best all-around true-wireless earbuds available today.The buds now come with foam ear tips to help you get a tighter seal.

usr: 0
This is interesting!