-
Website
http://mashable.com/ -
Original page
http://mashable.com/2006/07/27/snapvine-adds-voice-comments-to-myspace/ -
Subscribe
All Comments -
Community
-
Top Commenters
-
Robert Basil
142 comments · 8 points
-
Jennifer Van Grove
149 comments · 23 points
-
r0cketman22
317 comments · 52 points
-
rajagiri4
160 comments · 2 points
-
barringtonarch
150 comments · 4 points
-
-
Popular Threads
-
Enter the Zappos Sharing Happiness $3,000 Shopping Spree Giveaway Contest
10 hours ago · 109 comments
-
Head to Head: Chrome for Mac vs. Chrome for Windows
5 hours ago · 21 comments
-
Redbox: The Enemy of the Entertainment Industry? [STUDY]
1 hour ago · 7 comments
-
Holiday Mojo: What Kind of Seasonal Twitter User Are You?
3 hours ago · 13 comments
-
REVEALED: Details on YouTube’s VEVO Music Video Site
2 hours ago · 10 comments
-
Enter the Zappos Sharing Happiness $3,000 Shopping Spree Giveaway Contest
can u help me?
if u can how do i set it on my profile?
I have a great story for you about this new Phone / Web technology sometimes called “Phone 2.0†or “Web 2.0†with voice.
Do you know the companies PINGER and SNAPVINE?
Pinger and Snapvine are highly INSECURE!!!!
What this means: I can break into your Pinger and Snapvine phone accounts. I can listen to your messages. I can send out messages as you.
How do I do this? Easy. I mask / spoof CALLER ID / ANI. Anyone can do this, amateur hacks, etc.
Well, there are others, but suffice to say that these companies are doing new things with social networking sites and phones that help to connect people.
The problem is that these companies have a scalability problem based on inbound calling.
You see, if you have hundreds of thousands or millions of users, you can’t give everyone a unique dial in phone number.
SECURITY PROBLEM
What these companies have done is based user identification on Caller ID / ANI – meaning that you call their service, and their systems recognize your phone via Caller ID.
The problem is that Caller ID is highly insecure and can be faked.
The problem that these “dial in†companies are trying to solve is one of scalability. They simply cannot have enough dial in numbers for each user.
Therefore, they have architected a way to recognize each caller by Caller ID and to base the entire user authentication system on this insecure method.
This can easily be hacked.
SOLUTION
The solution is funny – both Pinger and SnapVine make you enter in a PIN CODE when you dial in without validating your phone.
After you validate your phone, you no longer need to enter the PIN CODE.
So in effect, when you validate your phone, you make your account INSECURE.
What Pinger and SnapVine need to do is always require the PIN CODE.
It's really that simple
HoOk It Up WiTh A VoIcE
CoMmEnT!~GrAcIaS~Y~AlRaTo~
HoOk It Up WiTh A VoIcE
CoMmEnT!If YoU Do, GoOd
LoOkIn OuT! AnD If YoU DoNt!
THEN FUCK YOU TOO THEN!!!!!!
~ALRATO!~
I see everyone else has one.