undefined | Better HN

0 pointsmdavis68904y ago0 comments

The attackers also needed to know the user's phone number and have access to their email account. That is a sufficiently high bar that I can still be sympathetic to Coinbase here.

Not sure why you discount username and phone either. Each of these is an additional layer of security simply by being more information an attacker needs to collect and associate. Coinbase doesn't publish a list of usernames. And how would someone associate phone numbers back to them?

0 comments

draygonia4y ago

You can easily check databases on and off the darknet to find people's phone numbers and most people don't have multiple phone numbers and rarely change their number because of the associated hassle with moving accounts. The same goes for their email and even passwords if they reused them.

mikeiz4044y ago

For example https://truepeoplesearch.com will give you name, address, and phone number for free and it is searchable.

It’s unfortunate how much is out there.

j / k navigate · click thread line to collapse