Man sues AT&T over 'SIM Swap' hack allegedly involving employees
1–10 of 129 posts
Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees
#2Wasn’t there a pin on his account?
Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees
#3This is why SMS verification is insecure.
Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees
#4Wasn’t there a pin on his account?
Would that have helped if there was an insider (AT&T supervisor) authorizing the transfer?
i.e. can a supervisor override lack of a PIN?
Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees
#5Wasn’t there a pin on his account?
Employees are able to override the pin entering requirement. There is absolutely nothing you can do to stop this from happening if you happen to get targeted. (Speaking from experience)
Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees
#6[deleted]
Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees
#7I am not condoning or justifying criminal behaviour but I have to wonder why on earth he would have his life savings in cryptocurrency, protected only by SMS 2FA, if he knew someone else this had happened to?
Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees
#8I wish him the best of luck but considering AT&T was a party in the big Supreme Court decision setting the precedent, I predict this falls down the dark hole of mandatory, binding arbitration about twelve minutes after the first hearing on a motion to dismiss and compel arbitration.
We’ve collectively given up our rights to sue in many instances (including when signing up for HN-backed services run by people who should know better).
Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees
#9Wasn’t there a pin on his account?
Pin is last 4 of social which isn’t hard to get.
Re: Man sues AT&T over 'SIM Swap' hack allegedly involving employees
#10This is exactly why I’m only faithful to FIDO U2F keys. Got a couple and ensure they’re safe. No one’s hacking my accounts unless they crack both my passwords and rob me physically... which at this point doesn’t seem like it’s going to happen.