News for hackers. Stuff that matters.

A comment on Verizon just raised a big warning flag for Yahoo. Parent comment

Re:Verizon just raised a big warning flag for Yahoo by JohnTHaller on Friday October 14, 2016 @02:04PM (#12709940)
If you know someone's Gmail account used for YouTube and have access to their cell phone to receive text message verifications for account resets, you have full access.

Being able to verify a code sent to the mobile phone registered with the account is used as proof of identity for account recovery by basically everything online except banking.

[ Parent | on HN ]
Re:Verizon just raised a big warning flag for Yahoo by rms_returns on Friday October 14, 2016 @02:11PM (#12709999)
k. But in boogie2988 case, did the hacker got access to his actual cell phone or just cell number? That's not clear.
[ Parent | on HN ]
Re:Verizon just raised a big warning flag for Yahoo by DanieI on Saturday October 15, 2016 @04:43AM (#12713267)
A social engineer goes to the Verizon store and tells customer service that they have lost their cellphone. Customer service deactivates the owner's phone and gives the social engineer a brand new phone that's connected to the owner's account.
[ Parent | on HN ]
Re:Verizon just raised a big warning flag for Yahoo by rms_returns on Saturday October 15, 2016 @03:11PM (#12715254)
Weird! Don't the Verizon guys do an ID verification that the person requesting the new phone is really who he claims he is?
[ Parent | on HN ]
Re:Verizon just raised a big warning flag for Yahoo by JohnTHaller on Saturday October 15, 2016 @11:25PM (#12716719)
They apparently didn't in boogie's case.
[ Parent | on HN ]