TLDR Web Dev · MISCELLANEOUS

HACKING THE CALL RECORDS OF MILLIONS OF AMERICANS

evanconnelly.github.io6 min read

Summary from the TLDR Web Dev newsletter

A security vulnerability that allows unauthorized access to call history logs of Verizon Wireless customers was discovered in the Verizon Call Filter iOS app. Anyone could retrieve incoming call details, including timestamps, for any Verizon number by manipulating the phone number in a network request. The vulnerability was from a lack of server-side validation. It has been reported to Verizon, who promptly addressed and fixed the issue.