News for hackers. Stuff that matters.

A comment on No password required: Mobile carrier exposes data for millions of accounts. Parent comment

Re:No password required: Mobile carrier exposes data for mil... by unobatbayar on Sunday April 11, 2021 @01:17AM (#26767650)
I like OTP. But I fear when I change phone number or leave country, the next owner could literally login to any of my online accounts using OTP on my previous number. That's why I always remove it from every account when I update, but can't keep track of all my accounts or emails.
[ Parent | on HN ]
Re:No password required: Mobile carrier exposes data for mil... by e-clinton on Sunday April 11, 2021 @09:30AM (#26770229)
Don’t give up your main number. 10 years ago I changed phone numbers and ported my old one to a super cheap SIP line. 3 years later I grabbed it back and it’s been that’s my main number since.

I use SMS OTP for a lot of services which would have little consequence if hacked.. and leave things like email and other sensitive stuff to the apps generating tokens.

[ Parent | on HN ]
Re:No password required: Mobile carrier exposes data for mil... by unobatbayar on Monday April 12, 2021 @03:22AM (#26776793)
That's true. My UK number seems to be completely fine after many years, even if I don't top it up. But some other country, after few months of inactivity they seem to be automatically sold to a new user.
[ Parent | on HN ]