News for hackers. Stuff that matters.

A comment on Gmail 2FA causes the homeless to permanently lose access 3 times a year. Parent comment

Re:Gmail 2FA causes the homeless to permanently lose access ... by simfree on Saturday October 08, 2022 @01:31AM (#33130021)
Your thinking of SIM swapping attacks. SIM cloning is much harder without breaching the SIM manufacturer (often Gemalto or another giant vendor).

Rerouting traffic with a malicious home location record (like what was done to Merkel for years), or changing the eSPID/NNID for a numbers texting enablement is much easier than doing a SIM swap and you can usually avoid detection too.

[ Parent | on HN ]
Re:Gmail 2FA causes the homeless to permanently lose access ... by samdcbu on Saturday October 08, 2022 @03:20AM (#33130473)
The irony of SIM cards being a cryptographically strong smart card and then carriers let their employees give out replacement SIMs left and right. Ah, humans.

fun fact: SIM cards can run applets based on Java. That’s how mobile payments are able to work in developing nations. I think there was a DEFCON talk about it a few years ago.

[ Parent | on HN ]