3 ms·
> It's pretty wild how baked into modern life insecure 2fa is. And a solution to this is very simple. Make telcos legally liable for losses due to SIM-swap att
by lr1970 3y ago
> It's pretty wild how baked into modern life insecure 2fa is.
And a solution to this is very simple. Make telcos legally liable for losses due to SIM-swap attacks and before the ink is dry on such a law, Telcos will ban using phone numbers for authentication in their TOS. The banks and alike will be forced to come up with another, hopefully, better auth system.
- guiambros 3y agoNot sure why you're being downvoted; I think this is pretty reasonable idea. Of course, there's zero chance of this happening in the US, given telcos would lobby heavily against it. But as a thought experiment, I think that's exactly what should happen: telcos should be held liable for their piss-poor security practices against SIM swapping. And you never know what's going to come up from EU from a regulatory perspective.
- freedomben 3y agoI didn't down vote GP and I agree with both of you, but I think a reason for down votes could be because it's quite authoritarian.
- ahaseeb 3y agoSecurity comes with cost and inconvenience. Like would you pay $50 everytime you've to swap a SIM ?