News for hackers. Stuff that matters.

A comment on Stranded after driving out of cellphone range in app-powered smart car. Parent comment

Re:Stranded after driving out of cellphone range in app-powe... by rwmj on Thursday February 20, 2020 @09:08AM (#22375124)
Or in my case, a bank that assumes I have mobile phone coverage at home. When I try to order anything on the internet these days it wants to send me a 6 digit SMS code, so now I can't order anything on the internet (although Amazon and Paypal still work, touch wood).
[ Parent | on HN ]
Re:Stranded after driving out of cellphone range in app-powe... by dreamcompiler on Thursday February 20, 2020 @10:15AM (#22375598)
Get a Google Voice account and use that number for SMS. Works great over wifi.
[ Parent | on HN ]
Re:Stranded after driving out of cellphone range in app-powe... by rwmj on Thursday February 20, 2020 @11:44AM (#22376335)
I'm trying to reduce any dependence on Google. Nevertheless I just tried it out and it says it's not available in my country.
[ Parent | on HN ]
Re:Stranded after driving out of cellphone range in app-powe... by njacobs5074 on Thursday February 20, 2020 @08:50PM (#22380331)
Skype numbers support this (in some countries), too. I live outside the US but have a US Skype number for this very purpose.
[ Parent | on HN ]
Re:Stranded after driving out of cellphone range in app-powe... by paranoidrobot on Thursday February 20, 2020 @11:44PM (#22380992)
While I like the spirit of this thread of work-around suggestions, I can't help but think that using $RandomService to verify access to someone's bank account is a terrible idea.

It's bad enough having banks rely on a phone system where most carriers are perfectly happy to let anyone who knows your Address, DOB and Mother's Maiden name to port your phone number to a new SIM.

It probably requires less effort (and certainly less risk of discovery) to take over a Skype, Google Voice or other VOIP/SMS service.

[ Parent | on HN ]
Re:Stranded after driving out of cellphone range in app-powe... by dreamcompiler on Friday February 21, 2020 @01:09AM (#22381262)
It's a terrible idea, but until banks and other websites quit weaponizing 2FA in the name of security theater, workarounds like this are sometimes the only option.
[ Parent | on HN ]