Re: "'Scammers stole £40k after EDF gave out my number"

Newyana2 <newyana@invalid.nospam> wrote:

On 3/3/2025 4:38 PM, Chris wrote:
 

Ironically, unless someone can hack into my computer they have
virtually zero chance of taking over my accounts. First, I don't have
online accounts, generally. Second, since I don't use 2FA an attacker
would have to somehow get my email passwords.

 
How does that work? 2FA requires a code *and* the password. You're removing
a layer of security.
 

 
 If they're able to take over your phone # they can just go
around to accounts and click "I lost my password". A reset
code wll then be sent to the cellphone.

That's not how it works. At best you get sent a reset link to your email.
This means the attacker needs to know your email account details as well as
the username/login for the service.

With banks it's more secure. In the UK at least. In order to reset anything
you need to answer personal questions which must match pre-set answers and
then the reset option is sent to your email. Or, often, a code sent to your
home via the mail.

So if they know
email addresses and account logins then they can take all
of them over within minutes. In my case, with no 2FA, there's
no way to get my email password. With no online bank account
there's nothing to hack.

You're dependent on a single factor. If your password is exposed or, more
likely, the company's security has been compromised via other means then an
attacker has free reign.

Yes, the chances are low, but the potential damage is much higher then if
had 2FA.

 
  2FA is not a security improvement. It's a gimmick to enable
far more exptensive tracking of people by linking phone ID and
location to other data.

Your paranoia is clouding your judgement.