4 ms·
It happened to me. Cellular carriers, in my case T-Mobile, didn't require any confirmation to port a number to a new phone/sim. Eventually some required the la
by ImuMotive 5y ago
It happened to me. Cellular carriers, in my case T-Mobile, didn't require any confirmation to port a number to a new phone/sim.
Eventually some required the last 4 of your social security number to port a number, which we all know at this point are pretty much public anyway.
T-Mobile now lets you set an arbitrary pin, which my parents promptly set to their DOB :facepalm:
I haven't looked more into it, but as far as I know, sim swap/port attacks were hilariously simple to execute which is why I only use SMS verification when it's the only option.
- deleted 5y ago[deleted]
- Wowfunhappy 5y agoYou might want to edit out what your parents set their pin to! (You can email hn@ycombinator.com if you're past the edit window.)
- ImuMotive 5y agoLol, I had made them change it as soon as they told me.
- deleted 5y ago[deleted]
- joshuaissac 5y agoMaybe what is needed is regulation that makes the service provider liable (with no option to disclaim it) for all damages suffered by the victim if the provider gives away their phone number to an attacker.