Urgent.News

What's breaking now, across thousands of outlets.

Editions

Tech

I accidentally logged hundreds of thousands of phone calls to military bases

Article URL: https://lina.sh/blog/hijacking-e164-arpa Comments URL: https://news.ycombinator.com/item?id=49387570 Points: 281 # Comments: 34

An expired nameserver allowed the narrator to gain control of DNS infrastructure domains for multiple territories, including military base phone networks. The narrator had previously hijacked .gov and .edu domains but this was different as it involved phone-network infrastructure domains (e164.arpa) of entire territories. The system, ENUM, was designed to route calls over the internet instead of traditional phone networks but saw little use and is now largely abandoned.

The narrator registered a .arpa domain, controlling DNS for three phone codes: +290, +246, and +247, associated with territories .sh, .io, and .ac respectively. This control enabled the narrator to route calls through their own SIP server, potentially intercepting conversations. Despite reporting the issue to several authorities, no action was taken as the DNS delegations are governed by an ITU-T committee at the UN level.

The narrator continued to host a personal site and other services on the hijacked domains, as they were essentially unused and harmless.

Written by urgent.news from Lobsters's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

This story

This is one outlet's version. Read the fullest account.

Read the original at lina.sh →

More in Tech

More from Friday 21 August →