Hacker News Reader

I have both YubiKey and SMS 2FA active on my Google account. However, for SMS purposes I got an extra phone number that nobody knows (well, nobody but me, Google and my phone provider) and that is inactive except when (A) I need to use it for 2FA purposes or (B) I need to top it up to keep it in service (which is every 6 months, approximately).

Is there still a risk of someone cloning my simcard even though I did not, ever, share my phone number with anyone?

View on HN

Be careful that the provider doesn't disable that number after 1-2 years without any activity.

Do they really disable paid-up numbers if nothing connects to them for a year?

With pay as you go they do. Usually six months. Paying more in resets the timer.

Oh, sure. I expect that. I was perhaps misinterpreting it to mean if nothing connects for a year the number is released even if it is paid up for 2 years which sounds wrong to me.

Reply on news.ycombinator.com