Cybersecurity News

Having worked in the industry on the retail side for both Sprint and then T-Mobile since 2007 and the amount of continuous annual training and borderline annoying effort these companies put out to retail employees about not disclosing CPNI (Customer Proprietary Network Information)... and considering how often this seems to happen... it's clear the back end teams don't get the same training or reminders despite their jobs actually being to disclose this info under the right circumstances.

Of note, he already had a warrant out in California for stalking an ex there. She had to change her phone number 4 times in 4 months, "but somehow he kept getting it."

She was also with Verizon, so it's pretty clear that this is a systemic issue with how they verify warrants(they clearly dont).

Here's hoping these two women and anyone else who sees this story and was mysteriously stalked while using Verizon sues the living fuck out of them.

Clearly the guy didn't have a warrant and Verizon gave the data anyway.

I'm starting to understand why borderline illiterate scammers from india are able to scam so many people.

If you're pushy and you just say that you're an official something or rather then people will just do things for you.

And likely there is nothing wrong with it.

This was in a security presentation I used to give. Watch the horror unfold. :)

https://www.youtube.com/watch?v=lc7scxvKQOo&t=2s

Yes, of course I will trust a police officer contacting me through their official domain (.gov or otherwise) of .... @proton.me

Not sure if this is just a failure of judgement, common sense, or training; or all three.

I'd like to say some kind of .gov should be required if person is claiming to be a government officer of some kind, but many cities use .org, and some police departments may have a separate domain from the city, but.... it's a freaking @proton.me domain.

I deal with doctors offices all the time, and I always give a little extra scrutiny to any professional that is using a gmail, hotmail, yahoo, aol, proton mail, etc. email address. It doesn't make things official, but it does seem shady if you don't put in the small amount money/effort to use a custom domain.

No shit we live in the wild West there is no security.

think about it... Think about the ways you could do stuff like that... There is nothing stopping it.