3 ms·
SIM swapping should not be an attack. It's called "Two-factor Authentication", not "OK Whichever Authentication".
by kohtatsu 6y ago
SIM swapping should not be an attack. It's called "Two-factor Authentication", not "OK Whichever Authentication".
- drivebycomment 6y agoIt absolutely is an attack. SIM swap is a targeted attack. In a targeted attack scenario, phishing (for id and password) will succeed with high enough probability. Also, the account recovery path often requires only the phone number, effectively making the recovery phone number as the single factor.
- kohtatsu 6y agoI'm remarking on the last sentence of your comment~