5 ms·
Someone tricked ATT that led to swim swap and this guy losing $1 million. Yet ATT "disputes the allegation and intent to prove it in court"? I get the fact tha
by pcurve 7y ago
Someone tricked ATT that led to swim swap and this guy losing $1 million. Yet ATT "disputes the allegation and intent to prove it in court"?
I get the fact that the real crook is the thief, but surely ATT is at least partly negligent. How much are they responsible?
- lotsofpulp 7y agoEveryone is trying to make phone networks the liable party because it’s cheap for them, and the phone networks don’t want to be the liable party. Even the federal government (SSA) uses SMS as 2FA for proof of identity. And unlucky people are caught in the middle.
- EGreg 7y agoThe same Federal Government says not to use SMS for 2FA, for quite a while: https://www.pindrop.com/blog/nist-explains-proposed-ban-on-sms-for-2fa/ https://www.pindrop.com/blog/nist-explains-proposed-ban-on-s... Why should we use outdated and vulnerable networks when social engineering is all you need to steal stuff? This from 2012: https://www.wired.com/2012/08/apple-amazon-mat-honan-hacking/amp https://www.wired.com/2012/08/apple-amazon-mat-honan-hacking... I encourage everyone to use a hard to guess email alias (foo+bar@gmail.com) for your LOGIN — not password. This thwarts many of these attacks! “Sir, let’s reset your password. What is your email please?” “foo@gmail.com” “Sorry, we have no such user.” “Really? But—“ “Really.”
- lotsofpulp 7y agoATT’s login is the phone number itself.
- ahaseeb 7y agoThrough Efani.com we do take responsibility which is backed by $5M insurance policy.
- lotsofpulp 7y agoHow does this work? I don’t understand how adding an additional party between me and my vendor could add security.
- ahaseeb 7y agoBecause we control the # at that time. We disassociate your personal information from your # and then mask every information that's required to do a port-out