Hacker News new | ask | show | jobs
by rsaesha 1159 days ago
Yet SMS based authentication still is a thing. Like SIM duplication and fake bases weren't a thing.

Yikes.
2 comments
filenox 1159 days ago
That's why you can enable a two-step verification PIN. You're asked to provide this PIN after installing Whatsapp on a new device. https://faq.whatsapp.com/1095301557782068
link
jve 1159 days ago
FYI It also asks PIN from time to time on the same device too. Just a small inconvenience.
link
pas 1159 days ago
It's a reminder, right? Signal has the same feature.
link
switch007 1159 days ago
What do you suggest as an alternative, taking in to account their 2 billion users?
link
JohnFen 1159 days ago
Using one of the standard authenticator apps would be much better, and at least as feasible as SMS.
link
UncleMeat 1159 days ago
The authenticator apps are just as weak as SMS against phishing, which is a gazillion times more common than sim swaps.

The authenticator apps cause loss of credentials more often because people don't back them up and then drop their phones in the toilet. The thing that makes SMS weak to sim swaps is also the thing that keeps a mountain of people from losing access to their accounts.

link
rsaesha 1159 days ago
Sorry, that goes as paid work on my book. I'm sure you understand.
link
switch007 1159 days ago
Ah ok just criticisms come free ;)
link
rsaesha 1157 days ago
Correct, and valuable answers command balanced compensation.
link