10 ms·
This doesn't even take into account how inherently insecure are actual mobile networks. Human factor notwithstanding. Using GSM? Your recovery code is sent ess
by keyme 10y ago
This doesn't even take into account how inherently insecure are actual mobile networks. Human factor notwithstanding.
Using GSM? Your recovery code is sent essentially plaintext over the air.
Think you're not using GSM? I'll just follow you around until you are (say, if you go out of town).
Since I'm already following you around, maybe I'll just jam your 3G/4G for a minute. Save us the waiting around.
Disabling 2G on your phone is a shitty solution. I want to be able to receive calls/SMS even if it's insecure.
TL;DR:
My account -> Sign-in and security -> Signing in to google -> Account recovery options -> Recovery phone -> Remove number
- jdavis703 10y agoBy the time I have you (or anyone else) following me around to hack me, I've got way bigger problems than loosing my Gmail account.
- keyme 10y agoI don't know. I can imagine you saying the same thing about the case in OPs article. The attack was targeted. The attacker knew your name, phone number and email address. The attacker went through some real effort to hack you (SEing reps, buying SIMs, burner iPhone, taking some risk). How much further do you think they were willing to go? Not enough for a $200 plane ticket? You have a problem the moment someone capable has targeted you. For the attacker, is just a matter of choosing the easiest attack vector. Today it was Verizon reps. Tomorrow it may get a bit more difficult.