Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Man sues AT&T over 'SIM Swap' hack allegedly involving employees

foxla.com

Post reply on HN
Print view View original

31–40 of 129 posts

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#32

Post by ikeboy »

techsupporter wrote: post #8

I wish him the best of luck but considering AT&T was a party in the big Supreme Court decision setting the precedent, I predict this falls down the dark hole of mandatory, binding arbitration about twelve minutes after the first hearing on a motion to dismiss and compel arbitration. We’ve collectively given up our rights to sue in many instances (including when signing up for HN-backed services run by people who shou…

So it gets moved to arbitration. If anything, it will move quicker and cost him less than a court case would.

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#33

Post by cik »

sliken wrote: post #21
asdfasgasdgasdg wrote: post #11

This is exactly the kind of thing that needs to start happening to actually motivate the companies to stop allowing this BS. Good luck! Also, don't have your life savings in crypto, but if you must, then please for the love of everything holy don't put it someplace where a SIM swap attack is enough to get it out. Irreversible transactions are kind of the whole point of it, so you need to be much more careful with cry…

Indeed, listen to NIST: [Out of band verification] using SMS is deprecated, and will no longer be allowed in future releases of this guidance.

It's rather sad that Canadian banks still view SMS as the best way forward. They'll text you, they'll email you, they'll validate over the phone... all of which are really this same problem.

I'm waiting for the days our banks will accept multiple 2FA solutions.

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#34

Post by fortran77 »

He's got good evidence. The SIM-swappers have actually been convicted. ATT says it's "an industry" problem, but it's 100% their problem. They are doing nothing to stop employees from robbing their customers.

Of course the victim could probably have protected his "life savings" better, but that's not the point.

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#35

Post by wmf »

sdan wrote: post #26
tyingq wrote: post #24

Earlier quoted context omitted.

Even that leaves it in a crazy volatile currency. Adrenaline junkie I guess, assuming it really was their life savings.

I guess you can call most cryptocurrencies volatile but some like BTC and ETH have so much marketcap that it's getting a bit better. Some people truly believe in crypto (and even institutions are... they store in Bakkt) and I guess you have to respect that (pretty sure they understand the risk as well).

Yes, BTC is "only" down 23% in the last month.

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#36

Post by camkego »

The amazing thing is with Wells Fargo that if you have a RSA SecurID 2FA FOB for access to your bank accounts, and you have a phone number configured for the account, you can use EITHER the 2FA RSA one-time pin, OR SMS verification to log into your bank account web page.

I mean this is a bank, are these guys for real?

Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees

#40

Post by dboreham »

camkego wrote: post #36

The amazing thing is with Wells Fargo that if you have a RSA SecurID 2FA FOB for access to your bank accounts, and you have a phone number configured for the account, you can use EITHER the 2FA RSA one-time pin, OR SMS verification to log into your bank account web page. I mean this is a bank, are these guys for real?

Yes, although there is actually a lower transaction limit on sessions initiated with SMS 2FA vs SecurID.
Post reply on HN