3 ms·
> the main issue at hand is google's neglectful lack of customer support. Customer support is the main entrypoint into 99% of sim swapping attacks and would b
by judge2020 4y ago
> the main issue at hand is google's neglectful lack of customer support.
Customer support is the main entrypoint into 99% of sim swapping attacks and would be similarly for any targeted account takeovers. What sort of information do you possibly think would be enough to prove someone actually owns a Google account over the phone?
- UncleMeat 4y agoI've heard of some system for reviewing identification like drivers licenses in extreme cases, but homeless people are largely not going to have access to this either.
- ImPostingOnHN 4y agothat is a phenomenal question that deserves to be answered by the highly paid engineers at Google they're smart, I'm sure they can find a way, even if it contains such horrible, detestable ideas like "more support staff" and "more training for support staff"
- joshuamorton 4y agoCompanies with highly trained support staff regularly fall for these attacks. The answer has been figured out by the highly trained engineers. It's "don't provide account recovery options that bypass 2fa". Yeah that sucks for a segment if people, but it sucks less than regularly getting your account stolen due to a social engineering attack. There really, truly, doesn't exist a panacea. You don't have and can't create an oracle that knows when an account recovery attempt is legitimate or not.
- Eisenstein 4y agoWhy don't we expand physical IDs into the network space. We need some way to verify ourselves online that doesn't rely on a private company and a TOS.