A High Schooler Hacked His Way to Free, Unlimited 4G Data

...

Jacob Ajit, a Virginia high school student, is also a hacker who discovered a loophole that gave him access to T-Mobile's LTE data network with no plan—completely free.

"One Friday night, I was sitting around pretending to be fine having absolutely nothing to do," he wrote in a Medium post. "I had a TMobile prepaid SIM on a spare phone with no active service, so I came up with a fun challenge: could I somehow get access to the internet without a data plan?"

He could, it turns out. Ajit discovered that T-Mobile allows devices connected to its LTE network access to some websites and servers without an account. That free access extends to Ookla's Speedtest app, which pings a nearby server to test the phone's upload and download speeds. Ookla is owned by Ziff Davis, PCMag's parent company.

By setting up his own proxy server, Ajit was able to spoof T-Mobile into thinking that the data he was accessing came from Speedtest, when in reality his hacked connection had free reign of the Internet.

"Just like that, I now had access to data throughout the TMobile network without maintaining any sort of formal payments or contract," he wrote. "Just my phone's radios talking to the network's radios, free of any artificial shackles."

He noted that it in theory, it would be very easy for T-Mobile to sniff out such a proxy that was attempting to impersonate a whitelisted server. All they'd have to do is limit their access to the servers on Speedtest's public list. There are hundreds of servers, however, and there are likely other sites and apps that T-Mobile might want non-subscribers to have access to, so implementing such a whitelist would be a tedious task.

T-Mobile has not responded to PCMag's request for comment on whether it plans to fix Ajit's loophole, but his publically-available proxy server was no longer working as of Friday afternoon.

Categories
APPLICATIONS
0 Comment

Leave a Reply

Captcha image


RELATED BY

  • 5300c769af79e

    Forbes acquires photo-sharing app Camerama, pushes further into mobile

    Through the acquisition, Camerama founder Salah Akram Zalatimo will become vice president of mobile products at Forbes.As such, Zalatimo will be charged with developing the Forbes mobile strategy and building out apps that use Camerama’s technology as a foundation.
  • 5300c769af79e

    Loose lips won’t sink Snips, a new Siri competitor that promises privacy

    Artificial intelligence is already getting close, and we may be even closer with Snips, a mobile AI company from the collective minds of three Ph.Today, the company launched its AI platform for iOS, claiming to be the only technology of its kind that is “private by design.
  • 5300c769af79e

    Sling Media Slingbox M1

    Another option is to use a physical place-shifting device like Sling Media's Slingbox (which uses the same technology that powers the aforementioned Hopper with Sling).The Slingbox was one of the first place-shifting television devices, and its most recent iteration, the Slingbox M1, is the best so far.
  • 5300c769af79e

    Twitter Makes it Easier to See Who Wants Your Data

    Updates include bigger and bolder visualizations (notably, the interactive graph at the top of the page), clearer explanations of numbers, and more granular details about requests.Unsurprisingly, the US is Twitter's biggest data requester, with 44 percent (2,520) of all worldwide applications (5,676) for account information between January and June 2016.