Reply to thread

Message

<blockquote data-quote="SimeonOnSecurity" data-source="post: 1065829" data-attributes="member: 105125">We will see how it plays out. But regardless of regulations, people are always going to be the weakest link. Companies already were trying to prevent sim swapping, but it still happens.SIM swapping isn&#039;t one of the easiest attacks. You&#039;d have to research the person you&#039;re trying to swap SIMs on. You&#039;d know the answers to basic security questions and likely their full SSN.So unless they make it mandatory to do it in person with ID and have to verify you have access to the original number or card on the account in person, I don&#039;t see a good way to prevent this issue moving forward.You can mitigate things for yourself by not using the number associated with your SIM at all, using solely VOIP numbers and using 2FA and randomly generated passwords to access those accounts. Or, if that isn&#039;t an option, use random information for the answers to your security questions and a service like Privacy.com to ensure that no one is going to steal that card info from any other service.</blockquote>

[QUOTE="SimeonOnSecurity, post: 1065829, member: 105125"] We will see how it plays out. But regardless of regulations, people are always going to be the weakest link. Companies already were trying to prevent sim swapping, but it still happens. SIM swapping isn't one of the easiest attacks. You'd have to research the person you're trying to swap SIMs on. You'd know the answers to basic security questions and likely their full SSN. So unless they make it mandatory to do it in person with ID and have to verify you have access to the original number or card on the account in person, I don't see a good way to prevent this issue moving forward. You can mitigate things for yourself by not using the number associated with your SIM at all, using solely VOIP numbers and using 2FA and randomly generated passwords to access those accounts. Or, if that isn't an option, use random information for the answers to your security questions and a service like Privacy.com to ensure that no one is going to steal that card info from any other service. [/QUOTE]

Verification