Why phone numbers stink as identity proof

Krebs on Security:

Phone numbers stink for security and authentication. They stink because most of us have so much invested in these digits that they’ve become de facto identities. At the same time, when you lose control over a phone number — maybe it’s hijacked by fraudsters, you got separated or divorced, or you were way late on your phone bill payments — whoever inherits that number can then be you in a lot of places online.

How exactly did we get to the point where a single, semi-public and occasionally transient data point like a phone number can unlock access to such a large part of our online experience? KrebsOnSecurity spoke about this at length with Allison Nixon, director of security research at New York City-based cyber intelligence firm Flashpoint.

I avoid like the plague giving anyone my phone number or Social Security/Social Insurance number. If a company demands I include one, I’ll give them a fake number whenever possible. It doesn’t work in all situations but I try to limit it as much as I can.



4 thoughts on “Why phone numbers stink as identity proof”

  1. The problem with that, of course, Shawn, is that every “friend” of yours who had your phone number in their contacts and said “Oh yes, please do!” to every Tom, Dick, and Harry app that asked “do you want us to search your contacts to see which of your friends is already on our service?”

    So, rest assured, whoever wants it already has bought and sold it 100 times already. 🙁

  2. They “text” you with what, then?
    Or do you eschew all of the green bubble people out there? 🙂

Leave a Reply

Your email address will not be published. Required fields are marked *