Comment on Phones have unique phone numbers, why dont computers have unique computer-numbers?
jeffhykin@lemm.ee 7 months agoThank you for such a long and detailed post! I indeed did not know about things beyond the SIM, and I didn’t know about the extra details about the country codes either. That is extremely interesting to me.
With the phone spoofing though, does that mean two factor with a phone number is basically useless? If I had authentication based on a MAC address, it would take seconds to break it. But I think, and sure hope, that auth based on phone numbers is more secure.
I think your domain name answer – that for the most part computers didnt need them – is a very satisfying answer.
Phone number 2FA isn’t useless, insomuch as it’s better than no 2FA at all, but it is easily the worst form of 2FA because SIM jacking (usually involves a scammer tricking a customer service agent into migrating your phone number to their device instead of yours in order to intercept the 2FA messages) is laughably simple using easily acquired info such as your DOB, address, and last 4 of your SSN.
If phone 2FA is the only option, use it. But don’t use it if you have any other option.
skullgiver@popplesburger.hilciferous.nl 7 months ago
jeffhykin@lemm.ee 7 months ago
Wow that’s super interesting to know. So its still got some resistance, but a lot less than I thought. Thanks again for sharing!