3 ms·
This is my biggest fear. Even if I use 2FA completely safely, using a physical chip, for 10/10 sites I care about, someone could spoof my phone number, call tec
by elif 4y ago
This is my biggest fear. Even if I use 2FA completely safely, using a physical chip, for 10/10 sites I care about, someone could spoof my phone number, call tech support with the right attitude, and remove my 2FA.
I'm so over the phone system and the credit card system. We have superiors but we are stuck in the past culturally.
- Xylakant 4y agoGood providers have a deliberately slow and onerous process in place - send proof of identity, multiple notices to the account owner, sometimes even documents mailed to a physical address. It needs to be possible to recover high value accounts - what else would you propose as a better solution?
- twawaaay 4y agoYeah, that's exactly the point. If the process takes couple of days and they do a lot of communication, there is a good chance the real owner of the account will get notified and have time to react before the attacker gets access to the account. Also, the commenters are completely wrong on that it is enough to have the email or ID to get through the process. The AWS people who contacted me required a lot more information that only the owner of the account would know.