Accessing Mobile data to National Network of T-Mobile successfully figure out by A 17 Year old boy. T-Mobile is most prominent wireless and service provider in ‘US’. Jacobe Ajit discovering that how to get free data, prepaid T-mobile phone decided to declare or publish is findings after this case that it did not “Pose Any Harm To T-Mobile or Their cursomers”.
Ajit stressed that he has contacted T-Mobile about the “unintentional flaw” in their network. “It’s an insignificant fix to whitelist Speedtest servers based on their official host list, as I explain in this post, and the educational great things about sharing with the my findings with community in this case outweighed the case for waiting around for a possible response from T-Mobile, ” he wrote in a post.
Ajit said that he explored the idea of accessing the internet without a data plan as a “fun challenge” if he was left alone on the Friday night with a T mobile prepaid SIM on the extra with no service. In theory, his phone was still linked to the network but it would only redirect him to a T-Mobile portal asking him to upgrade his mobile phone plan.
He explained that he started out clicking on links and trying to flee, which resulted in some failures and some “randomly” working out. This individual also noted that his internet speed test software was still working. “Clearly, the software was allowed to get data. One thing We noticed was that it was picking a TMobile Speedtest server, ” this individual noted.
Ajit eventually realized out that he was able to access press sent from any “/speedtest, ” folder, which this individual suspected was due to T-Mobile white-listing media documents from speed tests, whatever the host. He then examined his supposition by establishing up his own “/speedtest” folder, filling it with media, together with a Taylor Swift music online video. Next, Ajit created a proxy server that allowed users to get into any site using this technique.
“Just like that, I now had access to data throughout the TMobile network without maintaining any type of formal payments or contract. Just my phone’s radios talking to the network’s radios, free of any artificial shackles”, he said.
Ajit is currently a student at Thomas Jefferson University for Science and Technology in Alexandria, Virginia, Main board reported. The university student however made a valid observation in featuring how seemingly unnoticeable weaknesses like these can be exploited by cyber criminals for profit.
He concluded, “It’s interesting to note this is an extremely simple fix on T-Mobile’s part. They simply need to make their white list check against the official Speedtest server list I linked to previous. But the bigger idea the following is that folks make errors due to oversight all the time. This time, I’m getting some unpredictable free stuff. What about all those darker hiding zero-days that are extremely simple yet some engineer thought everything would be okay? It’s a little bit scary, and reminds us that all of our systems are indeed developed by humans. For now. ”