Re: "'Scammers stole £40k after EDF gave out my number"

Newyana2 <newyana@invalid.nospam> wrote:

On 3/6/2025 1:36 PM, Carlos E.R. wrote:
 

They're also getting
2FA codes. With the email address they go to that and say they
forgot their password. Then there are two possiiblities. They may
need to know security questions, or they may have a password
reset link sent to their cellphone. If it's the latter then they have
email access. That's part of the lesson here. 2FA is not safer. It's
riskier. It's bringing an insecure, portable device into the mix and
trusting that device fully.

 
2FA is safer, provided the bad guys can not clone the SIM.
 

   Exactly. But that's what happened.

And had it been you, a SIM swap is unnecessary as 2FA isn't required to
compromise you.

So, let's see,
we don't need raincoats as long as it never rains, thus
we don't need raincoats... Wait... :)

Wrong analogy. People with 2FA have raincoats when they need them, but may
not be always necessary.

You don't even own a raincoat so will always get wet if caught in the rain.