News for hackers. Stuff that matters.
Re:Personal information and ads on Twitter by themagician on Tuesday October 08, 2019 @07:03PM (#21198243)
I actually blame AT&T and Verizon for this. They make it FAR too easy to transfer a number to a new phone. 2FA aside, losing control of your phone number can cause all sorts of damage.

If it was harder to transfer a number to a new phone it wouldn't be that bad to use that method of 2FA for non-critical services.

Re:Personal information and ads on Twitter by codazoda on Tuesday October 08, 2019 @07:13PM (#21198306)
Then blame the government because telco's didn't used to allow number transfering. Then consumers complained and the government made it mandatory.

/Citation needed/

Re:Personal information and ads on Twitter by themagician on Wednesday October 09, 2019 @02:16PM (#21206155)
They didn't allow number transfers between carriers, but they did always allow number transfers within carriers AFAIK. Perhaps there was a time when numbers were hard tied to SIMs and I'm too young to remember?
Re:Personal information and ads on Twitter by maest on Tuesday October 08, 2019 @07:54PM (#21198560)
Is it really the telco's fault, though? It seems that telcos suddenly found themselves pushed in the business of identity management and proffing without haing any intention of doing that.

Telco's never made any claims about tieing your identity to your phone number - they just move information around. Blaming telcos is like blaming a hammer for not being big enough when you're tring to drive a screw with it.

Re:Personal information and ads on Twitter by themagician on Wednesday October 09, 2019 @02:14PM (#21206141)
It's definitely not like that at all.

It's not even really identity management. It's just way too easy to transfer a phone number. A simple protocol like, sending a text or email to the information on file and then waiting 24 hours to complete the transfer would be enough to stop 99% of number transfers.

Instead they process these transfer instantly, often using very little information to verify that the request was legitimate. You can often sweet talk the customer service reps with simple, "I forgot what information I used to sign up." They process that request and then it ruins your life and haunts you for the next 5 years.