3 ms·
> I'm not clear on how #1 is related to the SIM swapping problem. If controlling a phone number was not how platforms authenticated users, the impact of SIM sw
by thephyber 7y ago
> I'm not clear on how #1 is related to the SIM swapping problem.
If controlling a phone number was not how platforms authenticated users, the impact of SIM swapping would end in someone else being able to run up a cell phone bill.
I’m practice, authentication of web platforms is based on the authentication and security protocols of the weakest cell phone provider (because cell phone numbers can be transferred from provider to another provider).
We have no comprehensive authentication system, so our security is held hostage to the weakest link in a chain of (email provider, cell provider, platform OAuth provider, commodity web system)