SIM Vulnerability leads to information disclosure via malicious SMS

Re:SIM Vulnerability leads to information disclosure via mal... by tiborsaas on Friday September 13, 2019 @03:12PM (#20965344)

> You are now unable to access your account, most likely forever.

Nah, you just have to wait till you order a new SIM from your carrier.

Some companies also offer offline, 1 time passwords. 2FA SMS can be a pain in such cases, but it's not that bad.

[ Parent | on HN ]

Re:SIM Vulnerability leads to information disclosure via mal... by johnisgood on Friday September 13, 2019 @07:04PM (#20967565)

Oh, I just noticed I typed "SMS 2FA". My bad! In that case, you are correct, but in my particular case I lost all data related to Google Authenticator, including the shared secret. Customer service refused to help, despite having had the same phone number, because it was not SMS-based 2FA. Sorry! I should not get on HN when so mentally exhausted. :(

[ Parent | on HN ]

Re:SIM Vulnerability leads to information disclosure via mal... by tiborsaas on Monday September 16, 2019 @05:38AM (#20982405)

We use Google Authenticator too at work, I had to go to IT in person to get a new one when I got a new phone. It makes sense to refuse to give you based on solely the phone number. However, there should be a process to renew these credentials, phones die too.

[ Parent | on HN ]