EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 21·5 min read
I accidentally logged hundreds of thousands of phone calls to military bases
TL;DR
A researcher accidentally hijacked phone-network infrastructure domains, logging hundreds of thousands of calls to military bases, raising significant security concerns.
✦ Why It Matters
Evaluate your organization's DNS security practices to prevent similar vulnerabilities.
Key Takeaways
- Regularly audit DNS configurations to prevent hijacking.
- Monitor for expired domains that could be exploited.
- Implement strict access controls for sensitive infrastructure.
- Report security vulnerabilities to appropriate authorities promptly.
How It Works
The ENUM system allows phone numbers to be mapped to internet addresses, enabling cheaper VoIP calls. By controlling the DNS for specific e164.arpa domains, the researcher could manipulate call routing, potentially intercepting sensitive communications.