Topic· 8 essays

Telecom and subscriber identity

Carrier rules harden the carrier's side of a SIM change and never ask the subscriber for anything. These essays cover porting, eSIM, IoT fleets, interconnect and caller authentication.

Start here What each standard proves is the reference piece behind this topic.

All 8 essays

Vertical

The subscriber never signs: why SIM-swap rules harden the wrong side

Rules require carriers to authenticate securely before a SIM change or port. eSIM provisioning compressed that attack to minutes.

Definitional

STIR/SHAKEN attests the carrier, not the caller

Attestation level A means the originating carrier knows the customer and their right to use the number.

Definitional

The bribed rep problem: a taxonomy of insider-completable operations

Retail and care staff need broad account authority to work. That authority includes exactly the operations an attacker wants performed.

Vertical

Selling the number as a trust signal: what carriers could offer banks instead of SMS

Carriers hold the strongest real-world identity relationship in consumer telecom and monetise it as message delivery.

Vertical

IoT SIM fleets: who authorized a profile change on 200,000 devices?

Remote SIM provisioning made connectivity a software property of huge fleets. One console action can suspend or re-provision an entire estate.

Vertical

Recycled numbers: the account recovery collision nobody owns

A phone number is treated as a durable identifier by thousands of relying parties and as a leased resource by carriers.

Definitional

Emergency services location: tiering account attributes by physical harm

A registered emergency location decides where armed responders go. It is changed through a self-service portal with ordinary authorisation.

Vertical

The wholesale partner you cannot verify: interconnect and settlement identity

Route changes, capacity commitments and settlement adjustments move between carriers by email and portal.

← All topics · All essays