11–20 of 28 posts
I lucked into some compelling evidence I'd like to share with any security experts that would be able to help me.
Ah, I see.
I submitted this apparently just after: https://news.ycombinator.com/item?id=15070199 I got hacked a week ago in this exact fashion (I haven't tried to keep it a secret that I was involved in Bitcoin earlyish-on). I don't think they were able to get anything (largely because I am mostly out of the crypto space) but please remove cellphone 2FA from all your online dealings and add something like Google Authenticator i…
Is having Project Fi (Google as the carrier) safer?
https://blog.kraken.com/post/219/security-advisory-mobile-ph...
Earlier quoted context omitted.
Is having Project Fi (Google as the carrier) safer?
Yes, according to Kraken. "Consider switching to a more secure telco, without a human interface. Google Fi: no phone support agents, no physical locations, no problems." https://blog.kraken.com/post/219/security-advisory-mobile-ph...
> Accounts with banks and brokerage firms and the like are not as vulnerable to these attacks because these institutions can usually reverse unintended or malicious transactions if they are caught within a few days. Ah, I see.
> Accounts with banks and brokerage firms and the like are not as vulnerable to these attacks because these institutions can usually reverse unintended or malicious transactions if they are caught within a few days. Ah, I see.
Can but (in case of some banks) won't . As I have learned from a friend who was a victim of debit card skimming and theft - with TD bank failing to block obviously out-of-character fraudulent transactions and refusing to revert the fraudulent charges, and then charging fees for fraudulent overdraft to add insult to injury.
I submitted this apparently just after: https://news.ycombinator.com/item?id=15070199 I got hacked a week ago in this exact fashion (I haven't tried to keep it a secret that I was involved in Bitcoin earlyish-on). I don't think they were able to get anything (largely because I am mostly out of the crypto space) but please remove cellphone 2FA from all your online dealings and add something like Google Authenticator i…
Fake IDs are cheap. This would not prevent a motivated attacker.
Perhaps using a non-published extra phone number registered to someone else (perhaps your child) can provide protection? It's security through obscurity but with the phone number being the crucial piece of information, keeping it secret will go a long way. Of course the real fix would be to have better trained people working at the call centers.