Re:A privacy flaw in Comcast's automated telephone system
by goldenkey on Thursday April 12, 2018 @05:25AM
(#16819238)
There was a thread here recently about how it costs 10 bucks to rent out a cellular tower in Malaysia and co-opt a cell phone number as roaming, in order to defeat SMS security 2FA. Experts on HN were saying that the trunk level protocols for cell phone numbers are pretty much worthless when it comes to security. Their conclusion was that: security in this world is so poor that you might as well live with the assumption that there is no real security for public services.
[ Parent
| on HN ]
Re:A privacy flaw in Comcast's automated telephone system
by lotsofpulp on Thursday April 12, 2018 @05:53AM
(#16819327)
It's ludicrous to me that many services, especially financial, go through the trouble of setting up SMS 2 factor, but not TOTP.
Re:A privacy flaw in Comcast's automated telephone system
by gm-conspiracy on Thursday April 12, 2018 @08:02AM
(#16819947)
I have a friend that was at the beach with her husband, and she had taken her phone with her, but her husband left his in the car.
Thieves had used a jammer/replay device to unlock their car, remove her husband's phone from his Otterbox case, take his SIM card, reassemble the phone, and steal several credit cards from his wallet (also in the car).
Within the hour, my friend began receiving fraud alerts. If she had not taken her phone with her, they would not have known for quite a few hours, at least.
Re:A privacy flaw in Comcast's automated telephone system
by fyfy18 on Thursday April 12, 2018 @05:54AM
(#16819330)
Do you have happen to have a link?