Live data from Hacker News

NY Man Pleads Guilty in $20M SIM Swap Theft

krebsonsecurity.com

121–130 of 176 posts

Re: NY Man Pleads Guilty in $20M SIM Swap Theft

#121

This is exactly why I gambled on Efani.

> efani enforces 11-layer propriety military-grade client layer authentication I'm sure they're an upstanding company, but using the word 'propriety' instead of 'proprietary' is an instant turnoff for me. Security is a details-oriented endeavor, and everything from marketing to implementation needs to be squeaky clean. But, maybe that's just me!

Although “propriety” is a word and the sentence still makes sense with it.

Re: NY Man Pleads Guilty in $20M SIM Swap Theft

#122

I wonder if the following idea has occurred to anyone else? We have more and more kinds of accounts, financial products, online services, etc. that would benefit from some kind of real in-person verification at points in the process (initial application, maintenance, changes to account) that are imperfectly done with credit checks, questions/answers, logins, etc. We have Post Offices in nearly every corner of this co…

Japan Post provides this service, except the postman goes to your door and asks for ID and verifies it on the spot. It's very easy, and an extremely cheap way for services to verify identities (it's just +100JPY on the regular postal fare)

Re: NY Man Pleads Guilty in $20M SIM Swap Theft

#123

Earlier quoted context omitted.

That's part of the reason why I like having my money with an RIA that I have a relationship with: I can't make big withdrawals on the account without verifying with several people. That's a sigh of relief. I think there is a need for authentication, especially among people that are in and out of poverty. The catch-22 is that you can't get a job without an address, and you can't get an address without a job, so you ca…

Many people have addresses without having a job. Kids, stay-at-home partners, roommates, college students, retirees, and likely others.

I'm talking about homeless people: You can't have an address if you don't have a job because you can't pay rent. Unless you live in a city with adequate public housing. Duh.

Re: NY Man Pleads Guilty in $20M SIM Swap Theft

#124
post #81

Earlier quoted context omitted.

That’s actually fascinating, because this official login solution exists, and it seems very nice: login.gov. It’s from the GSA which seems to be doing some good work. I wonder how id.me differs, and how we haven’t centralized on one solution yet

login.gov is simply a user login mechanism. id.me does identity verification in many different ways.

Login.gov also supports identity verification: https://login.gov/help/verify-your-identity/how-to-verify-yo...

Re: NY Man Pleads Guilty in $20M SIM Swap Theft

#125

I just posted this in another thread... Also, don't let your mobile phone number expire and someone else get it. I can log in to the previous owner's TikTok account with just his number. I signed up for a food delivery service two days ago and it autofilled all the details with his full name and address for me. How many other sites let you log in with just a phone number? Asking for a friend...

you can register expired emails addresses too

Re: NY Man Pleads Guilty in $20M SIM Swap Theft

#126

> Following the theft, Terpin filed a civil lawsuit against Truglia with the Los Angeles Superior court Request: can anyone help clarify why this needed to be civil and didn't qualify for criminal?

because the criminal has much higher burden of proof , requires charges to be pressed .

Re: NY Man Pleads Guilty in $20M SIM Swap Theft

#127
post #50

Earlier quoted context omitted.

It's long, long overdue. That said a national ID scheme has long been opposed by a vocal part of the Christian population in the states. It's association with the new testament's prophesy of the mark of the beast prevents many lawmakers from pushing forward a proposal, especially since 65% of Americans in 2019 identified as having a belief in some variety of Christianity[0]. The obvious reality here is that in the wa…

I don't understand why people think religion is the main reason to oppose this. The main reason to oppose this is that if you had a low friction government ID system, surveillance capitalism would then require you to present your ID to do anything whatsoever and all privacy would disappear forever.

But we already have that? If you pay with a credit card, have an address on file, or use a state-issued ID (drivers license), I don't see how that would be worse.

Re: NY Man Pleads Guilty in $20M SIM Swap Theft

#128
post #5

Earlier quoted context omitted.

One of the few things I miss about giving up my landline a couple years ago is that I pretty much have to give out my cell phone number for anything that needs a valid phone number. (yes, I could use Google Voice or some sort of VOIP number but that starts making things complicated.) I used to be very selective at giving out my cell number.

> yes, I could use Google Voice or some sort of VOIP number but that starts making things complicated. You should soldier through it. Google Voice is a decent free service domestically, unless paranoid. I use it in the reverse manner as I expect you would intend (if you'd intend to generate many virtual throw away numbers to forward back to your phone until the forwarding is manually severed). My actual phone number…

More and more places refuse to accept my Google voice number for verification. It started out with nearly all banks but has gotten ridiculous recently.

Target outright refused for Target circle a couple years ago. Recently 7-11 had accepted my Google voice number to get points on in store purchases but now that I live somewhere where I need a car, the gas pump decided the number was invalid when I tried to get the discount on gas from the pump I'm worried since I basically never gave out my actual cell for over a decade now

Re: NY Man Pleads Guilty in $20M SIM Swap Theft

#129

I don't think people appreciate just how big the crypto fraud problem is, and how much bigger it will get. Crypto is so big, to put it in perspective, the gambling sector worldwide was estimated to be worth roughly $265 billion U.S. dollars in 2019. That is just 2/3 the market cap of Ethereum alone. Crypto is bigger than pretty anything right now. Bigger than pro sports. bigger than the entertainment industry. Only t…

The market cap of Ethereum is a worthless estimate of value. Ethereum has no backstop for value, unlike a casino or a company. Microsoft trading at $300 will never go to $0.01, there are enough raw assets at play to keep Microsoft worth $1. But Ethereum can go to $.01 there are no fundamental reasons for it. So, the price is purely speculative, so you can in no way whatsoever compute the total value of Ethereum as marginal price * number of Eth out there

Re: NY Man Pleads Guilty in $20M SIM Swap Theft

#130

I wonder if the following idea has occurred to anyone else? We have more and more kinds of accounts, financial products, online services, etc. that would benefit from some kind of real in-person verification at points in the process (initial application, maintenance, changes to account) that are imperfectly done with credit checks, questions/answers, logins, etc. We have Post Offices in nearly every corner of this co…

Japan Post provides this service, except the postman goes to your door and asks for ID and verifies it on the spot. It's very easy, and an extremely cheap way for services to verify identities (it's just +100JPY on the regular postal fare)

This seems like like it would only work in a country like Japan where the mail carrier would be on time. What if you're not home when they arrive? In the US they'd give you a 4 hour window and then show up 2 hours after the end of it.
Post reply on HN