The telecom industry has known about a major vulnerability in its mobile infrastructure for decades, so why was nothing ever done about it?