We got confirmation Dorsey was SIM jacked. Amazing the carriers haven't set up better protections against thishttps://www.buzzfeed.com/nicolenguyen/jack-dorsey-twitter-was-hacked …
Show this thread
That's not their job. A phone number is not an ID or a security token. It is just a friggin phone number for the purpose of using the phone company to call or text somebody. If other companies try to use it for something different that is their stupid problem.
-
-
I'm sorry but I fundamentally disagree. Carriers have an obligation to protect their customer's accounts - no matter what it is being used for. Not just a second factor issue
-
I actually shared the following with a journalist I’ve been speaking to recently about the growing problem of porting/SIM swapping. It’s happening in brick and mortar locations. There’s got to be a way to prevent this.pic.twitter.com/aDMmKIoa23
-
There isn't. Phone numbers, and the way they are distributed and changed, simply are not anything resembling a high-security protocol, and cannot be made so at any reasonable cost. People can complain and fantasize about this all they want, doesn't change reality.
-
I don’t disagree w/ your statement in general, but you telling me mobile carriers can’t add a feature that allows me to add a 2FA TOTP to my account to authorize porting of my number to a new device? . If lesser companies can add 2FA TOTP for specific actions, so can they. No?
-
The FCC decided some time ago to sacrifice security for consumer ease in porting numbers. Carriers did not choose the system we have now. Imagine if some regulator decided individual IP addresses must be portable across providers ASAP and you can imagine the resulting mess.
-
This is an interesting point. unaware of regulators created this mess but tonyour point if websites could be ported the same way it would be terrible. What are your thoughts on realistic solutions for carriers to try and do something to make porting more difficult?
End of conversation
New conversation -
-
-
Clearly it should be. Or sure they should continue to not give a shit about users. Seems like a responsible way to run things.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
You should see that it has become more than that. Our phone numbers need to become OUR property. A part of a digital identification scheme that comes with revocable keys we can use to sign for service providers.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Twitter must remove necessity to connect a phone numbers to the accounts...
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
It absolutely is the job of phone companies to protect their customers accounts. Account security is paramount to every single company, especially those that are publicly traded.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
They could definitely add optional security that would prevent their system from allowing phone porting of numbers under their control to other devices without having the existing phone in hand: AKA 2FA. Maybe not high security... but better than zero security, as is now.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
That once was true. However, once phone companies started requiring ID's to initialise service & 3rd parties started using said linked function for authentication, the "job" description was modified. Additionally, I don't believe 100% of the fault lies with the service provider.
-
A coupe of years ago, I contacted my service provider and informed them that my service is *never* to be ported to another provider without me turning up in store and showing two forms of ID. You can't fully outsource responsibility and expect everything to be ok.
End of conversation
New conversation -
-
-
He meant Telcos ought to be more diligent when authorizing SIM swaps. How about when you're just about to make a call only to find your SIM's junk?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Yea my provider always asks for a 4 digits code on the phone before he do anything to you with my num ...! Is beyond me why this is not the standard
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.