No word yet if you'll need the services of the bomb squad when you go over your minutes.
Those skilled at the housekeeping functions built into SS7 can locate callers anywhere in the world, listen to calls as they happen or record hundreds of encrypted calls and texts at a time for later decryption (Google translation of German original). There is also potential to defraud users and cellular carriers by using SS7 functions, the researchers say. This is another result of security being considered only after the fact, as opposed to being part of the initial design.
Facebook and Google also operate programs internationally that are exempted from users' data caps — a tactic known somewhat cryptically as "zero rating". Facebook in particular has made "Facebook Zero" not just a sales pitch in developing markets but also part of an Internet.org initiative to expand access "to the two thirds of the world's population that doesn't have it." But a surprising decision in Chile shows what happens when policies of neutrality are applied without nuance. Chile recently put an end to the practice, widespread in developing countries, of big companies "zero-rating" access to their services. "That might seem perverse," says Glyn Moody, "since it means that Chilean mobile users must now pay to access those services, but it is nonetheless exactly what governments that have mandated net neutrality need to do."
The report continues, "As this report finds, ICT performance is better in countries with higher shares of the population living in urban areas, where access to ICT infrastructure, usage and skills is more favorable. Yet it is precisely in poor and rural areas where ICTs can make a particularly significant impact." Projects like Google's Project Loon have their work cut out for them."