Hacker News Reader

> SMS is not secure and a SIM-swap away from someone being able to make purchases in your name.

as in physically getting hold of a SIM card and putting it into another phone? That's what SIM PIN codes are supposed to protect against, but nobody uses them anymore because they are disabled by default now and set to 0000. But you can still do it, every SIM has a PIN and PUK codes.

But SMS isn't 100% secure for different reasons though.

View on HN

"SIM swap" attacks are typically when an attacker cajoles a carrier to swap a number to a new SIM.

Ah I've heard of those, but that seems like another "first world problem" similar to 3-D Secure not being widespread. That's why identity theft is such an issue in USA, just by having enough information you can make customer support do all kinds of things over the phone.

Reply on news.ycombinator.com