4 ms·

I think switching to Google Fi seems to be the best option we have right now with respect to any sim swap attacks. Fi doesn’t have physical stores and it’s asso

I think switching to Google Fi seems to be the best option we have right now with respect to any sim swap attacks. Fi doesn’t have physical stores and it’s associated with my Google account which I can secure using non SMS based 2FA options. Unfortunately Fi is also a liability in the sense that Google can kill my account any time.

jstarfish 4y ago
Maybe you know something I don't, but switching to an entirely-virtual provider in response to a difficult-to-execute physical threat seems a bit misguided to me. Google also has notoriously nonexistent customer service. It does not instill confidence that anyone should rely on them for something as critical as identity management. The threat of them fucking you over when you need their help far outweighs the threat of hackers and scammers. (Virtual money was supposed to be more secure than physical coin. That experiment didn't work so well either.)
- alsodumb 4y ago
  It doesn’t seem that difficult-to-execute if the attack is targeted. Google Fi is known to have pretty good customer service, unlike rest of the free Google products. Again, considering everything, I came to the conclusion that Fi is the best option for me right now. YMMV. Google Fi’s implementation of verification also seems more robust and secure: https://support.google.com/fi/answer/9834243?hl=en https://support.google.com/fi/answer/9834243?hl=en
- roundandround 4y ago
  I think no tech support is the only real defense against SIM swap.. Then you need other redundancies that are equally impervious to social attack to be able to withstand a lock out from one of them. Actual security is a real pain, pretending you have it while having a tech support that can bypass it isn't nearly as painful and gives the same sense of security until it is tested.
  - jstarfish 4y ago
    Ok, that's pretty funny. Neglect-as-a-service!
- jbverschoor 4y ago
  No customer service is the removal of that specific attack vector

jstarfish 4y ago

Maybe you know something I don't, but switching to an entirely-virtual provider in response to a difficult-to-execute physical threat seems a bit misguided to me. Google also has notoriously nonexistent customer service. It does not instill confidence that anyone should rely on them for something as critical as identity management. The threat of them fucking you over when you need their help far outweighs the threat of hackers and scammers. (Virtual money was supposed to be more secure than physical coin. That experiment didn't work so well either.)

alsodumb 4y ago
It doesn’t seem that difficult-to-execute if the attack is targeted. Google Fi is known to have pretty good customer service, unlike rest of the free Google products. Again, considering everything, I came to the conclusion that Fi is the best option for me right now. YMMV. Google Fi’s implementation of verification also seems more robust and secure: https://support.google.com/fi/answer/9834243?hl=en https://support.google.com/fi/answer/9834243?hl=en
roundandround 4y ago
I think no tech support is the only real defense against SIM swap.. Then you need other redundancies that are equally impervious to social attack to be able to withstand a lock out from one of them. Actual security is a real pain, pretending you have it while having a tech support that can bypass it isn't nearly as painful and gives the same sense of security until it is tested.
- jstarfish 4y ago
  Ok, that's pretty funny. Neglect-as-a-service!
jbverschoor 4y ago
No customer service is the removal of that specific attack vector