Shubham had earlier found out a similar vulnerability in another mobile carrier, Optus mobiles voicemail service.
It is similar to the normal zip password cracker softwares available on the net.
Shubham discovered that Vodafone Australia didnt employ any kind of brutefore protection on its voicemail servers.
Vodafone has now fixed the number of attempts for entering the PIN at five.
But this also has some disadvantages to the customer.
A hacker can input five wrong PINs and lock the user out just for the lulz.
This will entail the user than calling the customer support to unlock his/her pin.
Last year the group published exploits found in disappearing photo-sharing app Snapchat.
The revelations allowed another group to release usernames and mobile numbers of 4.5 million Snapchat users online.
Thank you for contacting Apple Product Security, a company representative told him.
We appreciate you keeping us informed of your research, and hope your presentation goes well.
source: www.techworm.net
