News for hackers. Stuff that matters.

A comment on Former telecom manager admits to doing SIM swaps for $1k. Parent comment

Re:Former telecom manager admits to doing SIM swaps for $1k by durazabu on Friday March 15, 2024 @01:00PM (#39717940)
Biometrics like fingerprint scans can only be used as a username, not a password. Reusing passwords is a bad practice and having 200 different biometrics for 200 different services is not realistic. As soon as your fingerprint that you registered on your lost phone is leaked you will be in a world of trouble if you use it for other services. (Also biometrics can change with time)
[ Parent | on HN ]
Re:Former telecom manager admits to doing SIM swaps for $1k by the-chitmonger on Friday March 15, 2024 @01:09PM (#39718060)
That makes sense - maybe something closer to a passphrase-protected SIM could work?
[ Parent | on HN ]
Re:Former telecom manager admits to doing SIM swaps for $1k by toomuchtodo on Friday March 15, 2024 @01:36PM (#39718409)
Passkeys.
[ Parent | on HN ]
Re:Former telecom manager admits to doing SIM swaps for $1k by wutwutwat on Friday March 15, 2024 @04:28PM (#39720367)
Biometrics are never a good idea in general.

You can be court ordered/forced to put your thumb on the home button.

You can’t be forced to remember a password you “forgot” ;)

[ Parent | on HN ]
Re:Former telecom manager admits to doing SIM swaps for $1k by peddling-brink on Saturday March 16, 2024 @03:00PM (#39728502)
You can be jailed until you remember.
[ Parent | on HN ]
Re:Former telecom manager admits to doing SIM swaps for $1k by wutwutwat on Sunday March 17, 2024 @07:05PM (#39738870)
You’re missing the point. Even doing that, they still don’t have access.
[ Parent | on HN ]