this post was submitted on 09 Oct 2023
86 points (97.8% liked)

Australia

3520 readers
123 users here now

A place to discuss Australia and important Australian issues.

Before you post:

If you're posting anything related to:

If you're posting Australian News (not opinion or discussion pieces) post it to Australian News

Rules

This community is run under the rules of aussie.zone. In addition to those rules:

Banner Photo

Congratulations to @[email protected] who had the most upvoted submission to our banner photo competition

Recommended and Related Communities

Be sure to check out and subscribe to our related communities on aussie.zone:

Plus other communities for sport and major cities.

https://aussie.zone/communities

Moderation

Since Kbin doesn't show Lemmy Moderators, I'll list them here. Also note that Kbin does not distinguish moderator comments.

Additionally, we have our instance admins: @[email protected] and @[email protected]

founded 1 year ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 6 points 11 months ago (1 children)

Did u by chance use optus?

It makes no difference.

Australian mobile phone number allocations are trivial to work out from online sources and that leaves you with about 20 million plausible numbers. Then you just fire off a hundred thousand texts a week to random numbers via a half a dozen overseas SMS gateways for a hundred bucks and the Australian phone network dutifully delivers them all.

The texts are deliberately poorly written to weed out the smarter people. So while we're all ho-hoing about the message the scammers only have to interact with the ones that are mostly likely to fall victim to their scam.

[โ€“] [email protected] 1 points 11 months ago

I only asked since i noticed significant increase post the optus hack.

And yeah i figured bruteforcing wast too hard when i was in hs i heard a guy did simmillar thing to identify every student number/email (they where the same thing) in the state. Sent some email status code to every single id and the server dutifully responded with a status indicating which ones existed or not.

Btw did u know if ur on a NAT that blocks torrents (hypotheicaly a university NAT) all u need to do to bypass such a thing is to bruteforce a mac address the network allows through. I heard it was particularly easy since the first half of a mac address is determined by hardware.