Re:It’s time to stop using SMS for security
by michael_j_x on Tuesday March 16, 2021 @02:44AM
(#26473713)
But that is not really true for most countries. In my country, to get a sim ported you need to go to the shop and present your identification.
[ Parent
| on HN ]
Re:It’s time to stop using SMS for security
by bawolff on Tuesday March 16, 2021 @04:17AM
(#26474159)
Social engineering is all about convincing people to do things they aren't supposed to do.
Re:It’s time to stop using SMS for security
by jfrunyon on Tuesday March 16, 2021 @08:35AM
(#26475869)
In all countries, you have but to prove to some lowly paid telco employee's satisfaction that you are the owner of the number. That is not a serious impediment.
Re:It’s time to stop using SMS for security
by flemhans on Tuesday March 16, 2021 @04:50AM
(#26474342)
Same here (Denmark with Hi3G), but they often forget. I've had a new SIM issued for myself just by saying the phone number.
Of course that's several orders of magnitudes harder to do than just finding a leaked password somewhere, so it's still nice to have SMS as 2FA compared to nothing. It'll stop the mass bots.