Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Chris <ithinkiam@gmail.com>
Newsgroups: uk.telecom.mobile,comp.mobile.android
Subject: =?UTF-8?Q?Re:=20"'Scammers=20stole=20=C2=A340k=20after?=
 =?UTF-8?Q?=20EDF=20gave=20out=20my=20number"?=
Date: Sat, 8 Mar 2025 10:30:58 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 29
Message-ID: <vqh692$3klc$1@dont-email.me>
References: <vq478a$1a6p9$1@dont-email.me>
 <m2sdlgF2fjiU1@mid.individual.net>
 <vqc9e4$30gdm$1@dont-email.me>
 <vqchaq$31s6r$1@dont-email.me>
 <9j6p9lx24e.ln2@Telcontar.valinor>
 <vqev43$3it3a$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 08 Mar 2025 11:30:59 +0100 (CET)
Injection-Info: dont-email.me; posting-host="a68d0a99f287e7a83834388ee7e617c2";
	logging-data="119468"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1/el3mjRNxhEgGErqUHH2W8AQHEPSrirt4="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:wz9W1FRFaFdDXaGa/ncBYkBqSrA=
	sha1:MSFHv8H6IfcMJuc+BK0/7U/MG7o=
Bytes: 2325

Newyana2 <newyana@invalid.nospam> wrote:
> On 3/6/2025 1:36 PM, Carlos E.R. wrote:
> 
>>> They're also getting
>>> 2FA codes. With the email address they go to that and say they
>>> forgot their password. Then there are two possiiblities. They may
>>> need to know security questions, or they may have a password
>>> reset link sent to their cellphone. If it's the latter then they have
>>> email access. That's part of the lesson here. 2FA is not safer. It's
>>> riskier. It's bringing an insecure, portable device into the mix and
>>> trusting that device fully.
>> 
>> 2FA is safer, provided the bad guys can not clone the SIM.
>> 
>    Exactly. But that's what happened. 

And had it been you, a SIM swap is unnecessary as 2FA isn't required to
compromise you. 

> So, let's see,
> we don't need raincoats as long as it never rains, thus
> we don't need raincoats... Wait... :)

Wrong analogy. People with 2FA have raincoats when they need them, but may
not be always necessary. 

You don't even own a raincoat so will always get wet if caught in the rain.