Hacker News Reader

I wonder what the footprint is do the SIM hijacking, e.g. is anyone a sufficiently high enough bribe away from the type of scheme that compromises their account because it only takes 1 employee to effect it.

I've been switching to hardware keys when I'm able but it's not always feasible. I just bought a Titan key combo and you can't use most 3rd party email clients with it so that made it kind of useless to me (since Gmail's mail app isn't that great)

View on HN

Fraudulent SIM swaps are already being done and it's a lot less sophisticated than this - just show up to a store with a fake ID (or bribe the low-wage employee who isn't paid enough to give a shit so I can't really blame them).

Your SMS based 2FA is only as secure as the lowest paid employee at a cell phone store.

Lowest paid employee at the store? How about lowest paid idiot at the outsourced customer "service" centre.

Reply on news.ycombinator.com