Hacker News new | ask | show | jobs
by whyoh 1060 days ago
>Could someone suggest what would be the appropriate alternative here?

1. Identify to your carrier and get a new SIM, deactivate the old one. 2. Put the SIM in another phone and take back your WhatsApp account.

Isn't this the standard recovery method for apps that rely on your phone number?

Getting a new SIM takes longer than sending an email, but at least you don't have this easy abuse potential.
1 comments
yokto 1060 days ago
What is the abuse your referring to?

With your suggested approach, the attacker is free to use the account to impersonate the victim until they get a new SIM card, which could easily take days or weeks.

This seems like a degredation compared to the current abuse potential which is mostly limited to logging you out.

link
whyoh 1060 days ago
>This seems like a degredation compared to the current abuse potential which is mostly limited to logging you out.

I think it depends on who you ask. IIRC there was a stat that showed a substantial % of people only use WhatsApp rarely and they might not notice the deactivation and/or miss the 30 days deadline, getting their accounts deleted.

link