Interesting yet very typical of how Sprint denies CALRS' ability to be vulnerable to hackers. I do a lot of research in the field of telecom security. One might even call me a "phone phreak". Based on research I've done and manuals I've looked at, CALRS is by default exposed to remote intrusion. As is many other popular systems out there like your DMS-100 switch, AWAS systems, and Bell South's VoiceService system. Lets hope Kevin Mitnick's proof convinces judges that Sprint's switches was/is vulnerable and that it is very possible for anyone, especially organized crime groups, to exploit.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/497/13262#13262