Your "visible" phone in carrier infrastructure & Art. 32 GDPR
Channel: Alone in the Kitchen — by Nino Ivanov
Date: 2023-02-02

1. Get two phones/tablets on the same #mobile carrier  ;
2. Turn off all internet except mobile internet;
3. Determine your internal  (!) ipv4  on your first phone in the carrier's network (e.g. through ifconfig);
4. Open a listener on it, e.g. through netcat or a webserver (e.g. though Python or otherwise);
5. Try to connect with your second phone to your first phone: quite often, you will SUCCEED, i.e. there seems to be NOTHING stopping subscribers on the same network from #network #access for attacking each other. That even works often ACROSS providers (as long as they share infrastructure, or you are in roaming on the same infrastructure): the consequences for mobile routers, #security (of data processing pursuant to Article 32 #GDPR), etc. - are interesting to consider. See also: https://www.privacy-regulation.eu/en/article-32-security-of-processing-GDPR.htm