No, that's the problem, a hacker *can* clone your SIM. it's not *trivial*, but i... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

fragmede 6 months ago | parent | context | favorite | on: Ente Auth: open-source Authy alternative for 2FA

No, that's the problem, a hacker can clone your SIM. it's not trivial, but it's not impossibly hard, as in there are known attacks and if your fortune is protected by SMS 2fa, you'd better hope you don't draw attention from a motivated attacker. SS7 attacks and others are not theoretical.

dheera 6 months ago [–]

Actually all it needs is walking into the AT&T/Verizon store with a convincing fake ID + "I lost my phone"

Or a rotten apple working at the store who is working together with the perpetrator

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact