Preservation of anonymity when using the Internet in the Moscow Metro

    For some time I was considering whether to publish or not, but still I decided to try to lay out my thoughts and developments.
    I’ll tell you a little about the MosMetro_Free access points, namely how to remain anonymous and not give your mobile number.

    1. A bit of theory


    When a person passes authentication in the subway when joining the MosMetr_Free access point, an activation code and an activation link will come to the indicated number:
    cdn.vmet.ro/auth/activate.html?code=98765&phone=79250251234&idmac=123456
    where
    code is the device activation code;
    phone - mobile phone number;
    idmac - a unique entry in the database associated with the MAC address of the device.

    You can follow this link and activate it from anywhere, not just being in the subway. This makes me happy.

    2. The very essence


    From item 1. it follows that if you specify the mobile phone number of a neighbor in the country, then in the provider’s database there will be a record that the MAC of the device will correspond to the mobile number of the neighbor.

    You can spare the neighbor and indicate the number of the bot, which will wait for an SMS with a link to arrive - and it will follow it.
    I decided to try and wrote a small bot living by the number +79854764956 +79684350383 . As soon as SMS comes for identification, then within 5-7 seconds you can already use the Internet in the subway through MosMetro_Free

    3. The end


    I thought to write more, but just wanted to share.

    I would be glad to any comments, criticisms and wishes.

    Thanks for attention.

    UPD1: Replaced the bot's phone number with a new one. Slightly disappointing, but it was somewhat expected to get a limit on the number of devices that can be tied to one mobile number.
    This is clearly not the end, we’ll come up with something else.

    Also popular now: