And this is why smart people don't use text message to factor authentication, if at all possible. App based OTP is much safer
this post was submitted on 31 Jan 2024
108 points (95.8% liked)
Technology
59605 readers
3397 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
I wish the companies that decide to only allow SMS 2FA (or none at all) will fucking realize this sooner rather than later
Or at least be held liable for any losses.
And yubikey
Exactly. I don't have a physical key because I would want one that has open source hardware and software.
I believe Solokey is a brand that makes open source hardware keys.
Edit: they might only be fido 2 level 1 and not level 2 like yubikey
Edit 2: apparently there's also openkey and nitrokey so those are some more options for you.
Thanks, I will check them out, though, that only being level 1 could be a problem.
A guy I watch posted a video on the subject of crypto getting stolen in sim swap attacks.
These Teen Crypto Swappers Can Make $100,000 in 10 Mins - If They Don't Get Caught🎙Ep 112 Dirty Coms
This is the best summary I could come up with:
The US may have uncovered the nation's largest "SIM swap" scheme yet, charging a Chicago man and co-conspirators with allegedly stealing $400 million in cryptocurrency by targeting over 50 victims in more than a dozen states, including one company.
Once the swap occurs, the bad actor can defeat multi-factor authentication protections and access online accounts to steal data or money.
Powell's accused crew allegedly used identification card printers to forge documents, then posed as victims visiting Apple, AT&T, Verizon, and T-Mobile retail stores in Minnesota, Illinois, Indiana, Utah, Nebraska, Colorado, Florida, Maryland, Massachusetts, Texas, New Mexico, Tennessee, Virginia, and the District of Columbia.
When Powell's alleged scheme began in 2021, the FBI issued a warning, noting that criminals were increasingly using SIM-swap attacks, fueling total losses that year of $68 million.
Since then, US law enforcement has made several arrests, but none of the uncovered schemes come close to the alleged losses from the thefts Powell's crew are being accused of.
In October, the Department of Justice sentenced a hacker, Jordan Dave Persad, to 30 months for stealing nearly $1 million from "dozens of victims."
The original article contains 846 words, the summary contains 185 words. Saved 78%. I'm a bot and I'm open source!
I've seen the sole examples of the sim swap attack happening in US. Has it ever happened in other countries?
According to the article, it has happened in Europe as well.
I sure could use a payout like this. Totally legally, of course.