4 ms·

This is the reason I have disabled SMS as a recovery option in my gmail/google account. My 2FA for gmail is now my iphone and ipad. THey have to know my passwor

This is the reason I have disabled SMS as a recovery option in my gmail/google account. My 2FA for gmail is now my iphone and ipad. THey have to know my password and get one of my devices to hack my account. I also use protonmail and for SMS based 2FA, I plan to use a google voice number from a totally different google account w/c forwards the text to my protonmail account. Google voice numbers cannot be ported out. Hence, avoiding the sim hack. They can port out if they hack my "shadow" google account. The trick is to never use the shadow account for anything. Hence, the attackers have no way to get to your google voice.

cdiamand 7y ago
This is awesome. Thank you for sharing. I wish more people knew that their entire identity hinges on a store clerk at AT&T.
js2 7y ago
> Google voice numbers cannot be ported out. I hoped so too but someone replied to me that they can: https://news.ycombinator.com/item?id=19886705 https://news.ycombinator.com/item?id=19886705
pg_bot 7y ago
I'm fairly certain that any phone number in the US has to be portable by law.
- dontbenebby 7y ago
  You can port out a voice number - it's $3 if it was originally a voice number: https://support.google.com/voice/answer/1065667?hl=en https://support.google.com/voice/answer/1065667?hl=en Weirdly, you can't port a Gsuite google voice # to a gmail account. (I looked into it when considering canceling my Gsuite account)
klosnet 7y ago
I've ported out my google voice numbers several times.
anaisbetts 7y ago
Porting out GVoice numbers is harder, but it can absolutely be done, I've moved a purely Google Voice number to T-Mobile before.
retube 7y ago
> My 2FA for gmail is now my iphone and ipad sorry - how does that work? what's the platform / messaging service?
- PeterisP 7y ago
  Authenticator app that generates one-time codes; no messaging (or even being online) required after the initial sync.

cdiamand 7y ago

This is awesome. Thank you for sharing. I wish more people knew that their entire identity hinges on a store clerk at AT&T.

js2 7y ago

> Google voice numbers cannot be ported out. I hoped so too but someone replied to me that they can: https://news.ycombinator.com/item?id=19886705 https://news.ycombinator.com/item?id=19886705

pg_bot 7y ago

I'm fairly certain that any phone number in the US has to be portable by law.

dontbenebby 7y ago
You can port out a voice number - it's $3 if it was originally a voice number: https://support.google.com/voice/answer/1065667?hl=en https://support.google.com/voice/answer/1065667?hl=en Weirdly, you can't port a Gsuite google voice # to a gmail account. (I looked into it when considering canceling my Gsuite account)

klosnet 7y ago

I've ported out my google voice numbers several times.

anaisbetts 7y ago

Porting out GVoice numbers is harder, but it can absolutely be done, I've moved a purely Google Voice number to T-Mobile before.

retube 7y ago

> My 2FA for gmail is now my iphone and ipad sorry - how does that work? what's the platform / messaging service?

PeterisP 7y ago
Authenticator app that generates one-time codes; no messaging (or even being online) required after the initial sync.