Hacker News new | ask | show | jobs
by brianwawok 1144 days ago
It's a pretty low bar. I think if you know SSN you are good to go to do anything at Tmo, including a number port. Which means phone as a 2fa is very easy to beat.
1 comments

I was about to freak out, then I remembered that there's no ID in the US

I can't change anything about my phone without providing both a "Public" (Taxpayer Code: Doesn't change, commonly shared, also used as a state bank account number) and "Private" (Document number: changes per renovation, only shared for identification purposes) number

Well, it's not so much that there's "no ID" as much as it is that we have hundreds of IDs.

Some carriers in the US have you set a PIN number for phone porting. Although, people still forget them.

You provide a SSN and they will give you the porting pin (or let you pick it more likely)