Comments by "Brandon" (@gravoc857) on "Nicole Perlroth: Cybersecurity and the Weapons of Cyberwar | Lex Fridman Podcast #266" video.

  1. I’m surprised she didn’t touch on how and mobile two factor authentication is. If you’re going to 2FA, use email. Your email provider won’t give your email away on a socially engineered customer service call. Verizon, T-Mobile, or any mainstream ISP are notorious for being low security. If someone has your password, they likely have enough info on you to authenticate enough into phone customer support. Your ISP will literally mail a SIM chip to the hacker, and the hacker now has your mobile number. ISP support are supposed to be following authorization protocol. They have back doors into your account if you can’t verify for some obscure reason. Someone can be socially engineered to bypass authentication on your ISP’s end and achieve a means to an end.
    1