Hackers Claim They Breached T-Mobile More Than 100 Times in 2022

Re:Hackers Claim They Breached T-Mobile More Than 100 Times ... by livueta on Tuesday February 28, 2023 @03:31PM (#34974408)

Do you happen to know if they allow you to also totally disable SMS 2FA?

I know that Vanguard, for instance, supports non-SMS 2FA but doesn't let you disable SMS as a fallback (and I'd rather not just totally remove all phone numbers, but maybe I have to...).

[ Parent | on HN ]

Re:Hackers Claim They Breached T-Mobile More Than 100 Times ... by 6ak74rfy on Tuesday February 28, 2023 @03:38PM (#34974484)

Yeah, in Fidelity SMS 2FA is disabled for me. Fall back is to call them to get into my account. Don’t know about Schwab.

[ Parent | on HN ]

Re:Hackers Claim They Breached T-Mobile More Than 100 Times ... by stanleydrew on Tuesday February 28, 2023 @04:30PM (#34975114)

I had their non-SMS Symantec 2FA set up a couple years back, but turned it off cause I couldn't figure out how to disable the SMS fallback. Every time I got a new device and wanted to set up the Symantec TOTP generator they would just send me a SMS for validation. So I just told them to turn off the Symantec part.

Maybe they've changed their policy since then. But when you call to get set up on a new device, how do they verify your identity now if you don't have SMS fallback?

[ Parent | on HN ]

Re:Hackers Claim They Breached T-Mobile More Than 100 Times ... by yborg on Tuesday February 28, 2023 @05:41PM (#34975961)

I believe you can remove SMS fallback now on Vanguard.

[ Parent | on HN ]

Re:Hackers Claim They Breached T-Mobile More Than 100 Times ... by livueta on Wednesday March 01, 2023 @02:28PM (#34987075)

Neat, thank you! I'll give it a try.

[ Parent | on HN ]