SoylentNews

An Anonymous Coward writes:

T-Mobile US leaked free access to sites with '/speedtest' in the URL [theregister.co.uk]

American T-Mobile subscribers can score free internet access by running traffic through a proxy with "speedtest" in its URL.

Seventeen-year-old high school student Jacob Ajit found the loophole , since taken down, which allowed cheapskates to access T-Mobile's data network without paying.

Ajit realised speed testing sites and those with the feature embedded could be accessed using a T-Mobile SIM that had no data credit.

He then set up a proxy [medium.com] on a remote server placing "/speedtest" in the URL and could then access all areas of the network.

Ajit said he reported the flaw to T-Mobile and published his hack without waiting for a fix since exploitation of the hole did not put customers at risk.

[...]

Ajit said he made the decision while bored on a Friday night, trying random apps to see which would load on his credit-depleted account.

T-Mobile customers have responded with confusion since their speedtest hole [reddit.com] no longer works [reddit.com].

Original Submission