Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Man sues AT&T over 'SIM Swap' hack allegedly involving employees

foxla.com

Post reply on HN
Print view View original

21–30 of 129 posts

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#21

Post by sliken »

asdfasgasdgasdg wrote: post #11

This is exactly the kind of thing that needs to start happening to actually motivate the companies to stop allowing this BS. Good luck! Also, don't have your life savings in crypto, but if you must, then please for the love of everything holy don't put it someplace where a SIM swap attack is enough to get it out. Irreversible transactions are kind of the whole point of it, so you need to be much more careful with cry…

Indeed, listen to NIST: [Out of band verification] using SMS is deprecated, and will no longer be allowed in future releases of this guidance.

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#22

Post by judge2020 »

usaphp wrote: post #19

> and within minutes, the hackers had stolen $1.8 million in cryptocurrency from him > It essentially destroyed our financial future, our entire life savings was stolen Who keeps their entire life savings in crypto?

With that much money not using a hardware wallet is short-sighted.

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#23

Post by sliken »

rb808 wrote: post #18
sdan wrote: post #10

This is exactly why I’m only faithful to FIDO U2F keys. Got a couple and ensure they’re safe. No one’s hacking my accounts unless they crack both my passwords and rob me physically... which at this point doesn’t seem like it’s going to happen.

What happens if the keys get lost or destroyed? It seems like a never ending problem.

Get 2 keys, keep one in a safe place. Add both to your important accounts.

Then also setup TOTP, so if you lose both keys and have a working cell phone with the app installed you can still login.

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#24

Post by tyingq »

judge2020 wrote: post #22
usaphp wrote: post #19

> and within minutes, the hackers had stolen $1.8 million in cryptocurrency from him > It essentially destroyed our financial future, our entire life savings was stolen Who keeps their entire life savings in crypto?

With that much money not using a hardware wallet is short-sighted.

Even that leaves it in a crazy volatile currency. Adrenaline junkie I guess, assuming it really was their life savings.

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#25

Post by sdan »

rb808 wrote: post #18
sdan wrote: post #10

This is exactly why I’m only faithful to FIDO U2F keys. Got a couple and ensure they’re safe. No one’s hacking my accounts unless they crack both my passwords and rob me physically... which at this point doesn’t seem like it’s going to happen.

What happens if the keys get lost or destroyed? It seems like a never ending problem.

I have one at work/keep on my computer and one at home.

Some websites allow TOTP which is still safer than SMS, but if I lose one, I'll get another one while I use the 2nd.

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#26

Post by sdan »

tyingq wrote: post #24
judge2020 wrote: post #22

Earlier quoted context omitted.

With that much money not using a hardware wallet is short-sighted.

Even that leaves it in a crazy volatile currency. Adrenaline junkie I guess, assuming it really was their life savings.

I guess you can call most cryptocurrencies volatile but some like BTC and ETH have so much marketcap that it's getting a bit better. Some people truly believe in crypto (and even institutions are... they store in Bakkt) and I guess you have to respect that (pretty sure they understand the risk as well).

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#27

Post by munchbunny »

rb808 wrote: post #18
sdan wrote: post #10

This is exactly why I’m only faithful to FIDO U2F keys. Got a couple and ensure they’re safe. No one’s hacking my accounts unless they crack both my passwords and rob me physically... which at this point doesn’t seem like it’s going to happen.

What happens if the keys get lost or destroyed? It seems like a never ending problem.

Keep two or three, put one in a bank or a safe at home. That should be enough redundancy for most people. As long as you can still get in to revoke/enroll stuff you should be okay.

It’s not so much a problem as it is a balance of security, redundancy, and effort. You decide where you want to be on that balance of considerations.

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#28

Post by tyingq »

sdan wrote: post #26
tyingq wrote: post #24

Earlier quoted context omitted.

Even that leaves it in a crazy volatile currency. Adrenaline junkie I guess, assuming it really was their life savings.

I guess you can call most cryptocurrencies volatile but some like BTC and ETH have so much marketcap that it's getting a bit better. Some people truly believe in crypto (and even institutions are... they store in Bakkt) and I guess you have to respect that (pretty sure they understand the risk as well).

Not faulting them for having significant sums there. But "life savings"? Ouch.
Post reply on HN