[33Backpack33]

When you consider SMS 2FA is often used to fix the poor or reused password problem we see it's not helping much at all but only delaying the problem.

[ryanlol]

That’s bullshit, nobody is going to bother with attacks like this to steal your uber or doordash account. SMS 2fa kills credential stuffing attacks for all but the highest value targets.

[33Backpack33]

You do know uber and doordash accounts are hacked all the time because of password reuse? There is a huge black market for hacked accounts from doordash and the like.

[ryanlol]

That’s my point. These accounts are worth a couple of dollars, nobody would spend $50 on a hacked uber or doordash account.

These accounts are only worth anything as long as they’re cheaper and easier to use than stolen credit cards.

[33Backpack33]

The original VICE article said it was $16 and they can take as many accounts as they want. It seems worth it to me.

[ryanlol]

Yeah, because that $16 plan is totally going to last for long after people start abusing this at scale.