Comment on SIM binding in India: What it means for WhatsApp, Telegram users and why the government wants it
CameronDev@programming.dev 15 hours agoI’m more thinking along the lines of getting a cheap sim, signing up for signal and them letting the plan lapse and the number is released for use again. And then someone buys a new plan, but gets the recycled number. Not sure how realistic that is as a risk vector though.
sonofearth@lemmy.world 10 hours ago
But I don’t think it would make any difference. What would actually secure the account is the internal account password which both Signal and Whatsapp already have.
CameronDev@programming.dev 9 hours ago
If you hold the number it can’t get recycled into distribution. Signal does fall back to MFA codes over SMS from memory (I’ve recovered the signal account for my grandma, as I own the number), so anyone who controls the number controls the account.