Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The article doesn't say if the user had two-factor authentication set up. I guess it's implied they used SMS as the second factor.

This would happen with any email provider.

So the fix isn't changing email provider, it's using a more secure second factor, e.g. U2F.



Right, but at least with a different email provider it's infinitely more likely to get actual support if this happens.


"I don't remember my password and I have a new phone, can you help me" is precisely how attackers do sim swaps in the first place.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: