Hacker News Reader

This isn’t just an sim/T-Mobile issue

Most customer service representatives are on very low incomes (especially in other countries) and it’s not hard to find one who will take actions for a (western) small amount of money. CSRs often have powerful capabilities and access to sensitive information. With poor access controls.

Solve the SMS/MFA issue and they’ll attack the next thing in line

View on HN

>Most customer service representatives are on very low incomes (especially in other countries) and it’s not hard to find one who will take actions for a (western) small amount of money. CSRs often have powerful capabilities and access to sensitive information. With poor access controls.

Another reason to implement my proposal of a law requiring all customer service serving US customers to be located in the US, UK, Ireland, Canada, Australia, or New Zealand.

Yeah, but ideally the next thing in line is much more secure than a financially vulnerable, low wage worker.

Afaik SMS 2FA is the easiest to compromise of all the methods. At least with, say, email, you need a password and potentially a different 2FA first.

Reply on news.ycombinator.com