Path: news.eternal-september.org!eternal-september.org!feeder3.eternal-september.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: "Carlos E.R." <robin_listas@es.invalid>
Newsgroups: comp.mobile.android,uk.telecom.mobile
Subject: =?UTF-8?Q?Re=3A_=22=27Scammers_stole_=C2=A340k_after_EDF_gave_out_m?=
 =?UTF-8?Q?y_number=22?=
Date: Fri, 7 Mar 2025 16:16:31 +0100
Lines: 28
Message-ID: <f7fr9lxj34.ln2@Telcontar.valinor>
References: <vq478a$1a6p9$1@dont-email.me> <m2sdlgF2fjiU1@mid.individual.net>
 <vqc9e4$30gdm$1@dont-email.me> <vqchaq$31s6r$1@dont-email.me>
 <9j6p9lx24e.ln2@Telcontar.valinor> <vqev43$3it3a$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Trace: individual.net OoRRnztIC6577PR3rrM1RQJi0YjK3ybVsenc3Vbtw3x730w1I8
X-Orig-Path: Telcontar.valinor!not-for-mail
Cancel-Lock: sha1:GzooJnftCmCYSP29BbusHeaxCYQ= sha256:9TwXZQF+MC4O56WQdout/qMhfCtrzXi6c7c03f1qGks=
User-Agent: Mozilla Thunderbird
Content-Language: es-ES, en-CA
In-Reply-To: <vqev43$3it3a$1@dont-email.me>

On 2025-03-07 15:17, Newyana2 wrote:
> On 3/6/2025 1:36 PM, Carlos E.R. wrote:
> 
>>> They're also getting
>>> 2FA codes. With the email address they go to that and say they
>>> forgot their password. Then there are two possiiblities. They may
>>> need to know security questions, or they may have a password
>>> reset link sent to their cellphone. If it's the latter then they have
>>> email access. That's part of the lesson here. 2FA is not safer. It's
>>> riskier. It's bringing an insecure, portable device into the mix and
>>> trusting that device fully.
>>
>> 2FA is safer, provided the bad guys can not clone the SIM.
>>
>     Exactly. But that's what happened. So, let's see,
> we don't need raincoats as long as it never rains, thus
> we don't need raincoats... Wait... :)

No.

You are looking at it wrong.

We need 2FA, and also we need secure practices by everyone involved on 
the handling of SIMS. Any weak link and you are at risk. And 2FA 
strengths the link.

-- 
Cheers, Carlos.