Trump Mobile hack and apparent lack of FCC authorization raise security alarms

本文为原文前 6,000 字符的节选翻译，完整内容请查看原文。

Trump Mobile apparently failed to obtain necessary authorizations to operate the international calling portion of its phone service, Sen. Maggie Hassan (D-N.H.) wrote in a letter to the company today. Her letter said Trump Mobile also doesn’t appear to have submitted a required plan for fighting robocalls. Trump Mobile’s key business partner, Liberty Mobile Wireless, did make a robocall database filing, but it was not complete, Hassan said.

据参议员玛吉·哈桑（Maggie Hassan，民主党籍，新罕布什尔州）今天致信特朗普移动（Trump Mobile）称，该公司似乎未能获得运营其电话服务中国际通话部分所需的授权。她在信中表示，特朗普移动似乎也没有提交打击骚扰电话的必要计划。哈桑指出，特朗普移动的主要商业合作伙伴自由移动无线（Liberty Mobile Wireless）虽然提交了骚扰电话数据库备案，但并不完整。

Hassan’s letter raised questions about Trump Mobile’s security related to a report that hackers stole personal data of 3,615 customers and Trump Mobile’s previous confirmation that a vendor it uses exposed customers’ personal data on the Internet. Hassan alleged that Trump Mobile failed to follow multiple FCC filing rules that are supposed to help ensure the security of mobile services.

哈桑的信对特朗普移动的安全性提出了质疑，这与一份关于黑客窃取了3615名客户个人数据的报告，以及特朗普移动此前承认其使用的一家供应商在互联网上泄露了客户个人数据有关。哈桑指控特朗普移动未能遵守多项旨在帮助确保移动服务安全的联邦通信委员会（FCC）备案规则。

“The apparent absence of authorization for Trump Mobile international services raises questions about who is providing or reselling the international telecommunications services advertised by Trump Mobile, the authority under which those services are being provided, and the company’s commitment to complying with requirements designed to safeguard national security,” Hassan told Trump Mobile CEO Patrick O’Brien.

哈桑在致特朗普移动首席执行官帕特里克·奥布莱恩（Patrick O’Brien）的信中写道：“特朗普移动国际服务明显缺乏授权，这引发了人们的疑问：究竟是谁在提供或转售特朗普移动所宣传的国际电信服务？这些服务是在何种授权下提供的？以及该公司对遵守旨在维护国家安全的要求有何承诺？”

Referring to the recent data breach, Hassan said it’s worrisome that a ransomware group “claimed that when it notified Trump Mobile of the breach, the company responded that ‘[w]e have no team to handle this.’” Trump Mobile also seems to lack a robust customer authentication process and offers “streamlined service activation that can make it easier for scammers to obtain US numbers,” Hassan wrote.

提到最近的数据泄露事件，哈桑表示，一个勒索软件组织“声称当他们通知特朗普移动发生泄露时，该公司回应称‘我们没有团队来处理这个问题’”，这令人担忧。哈桑还写道，特朗普移动似乎缺乏健全的客户身份验证流程，并提供“简化的服务激活方式，这可能使诈骗者更容易获得美国号码”。

Trump Mobile, which has a trademark and name licensing deal with the Trump family, advertises that its customers can call more than 230 countries and territories. “Yet a search of the FCC’s International Communications Filing System suggests that Trump Mobile does not hold the necessary authorization for these services under Section 214 of the Communications Act of 1934,” wrote Hassan, the top Democrat on the US Congress Joint Economic Committee.

特朗普移动与特朗普家族签有商标和名称许可协议，该公司宣传其客户可以拨打230多个国家和地区的电话。身为美国国会联合经济委员会民主党领袖的哈桑写道：“然而，对联邦通信委员会国际通信备案系统的搜索显示，特朗普移动并未根据《1934年通信法》第214条持有这些服务所需的授权。”