4 ms·
From reading this it seems that this is unrelated to the SIM Swapping attacks that were in the news recently and are mostly customer service exploits and not te
by dewey 7y ago
From reading this it seems that this is unrelated to the SIM Swapping attacks that were in the news recently and are mostly customer service exploits and not technical issues.
- judge2020 7y agoATT has an "extra security" mode that requires your account PIN even when walking into a retail store - https://www.att.com/esupport/article.html#!/wireless/KM1051397 https://www.att.com/esupport/article.html#!/wireless/KM10513...
- dylz 7y agoDo you know whether this requires the person in store to enter an exact match/have you enter it on a pinpad, and that it is absolutely not removable in any way by any CSR, customer service, or other humans other than you knowing it and logging in with it?
- judge2020 7y agoI have no idea, but for the first one: chances are the retail employee will enter the pin themselves.
- lotsofpulp 7y agoATT asks for the PIN over the phone too, so best practice seems to be changing PIN after giving it to an ATT employee. But who knows if PINs are visible to ATT employees, and what verification they do in case PIN is forgotten. It’s all moot if any ATT employee can reset it without a significant paper trail.
- Thorrez 7y agoEven if there's a paper trail, that doesn't mean it won't happen. For example here's a guy who got fired for transferring a number without the code: https://www.reddit.com/r/personalfinance/comments/6nxkbl/so_i_was_probably_fired_today/ https://www.reddit.com/r/personalfinance/comments/6nxkbl/so_...
- lotsofpulp 7y agoWell, ideally, it would lead to stricter penalties and process improvements to prevent it from happening. And it would allow for fraud liability to be placed on ATT causing them to care to fix the issue.