All too often the solution for technology challenges involves more technology. Oftentimes the recommendation for new hardware or software is easily justified. More often the recommendation overlooks a solution deemed too easy. In today’s post, the problem is real and the solution while free is not without the challenge associated with any change.
The question that drives this post is: What would happen to your business if your cell phone number was hijacked? Let’s start the answer with a bit of history and technical detail.
Cell phones all require a “Subscriber Identity Module” also known as a SIM. The first SIM card was developed in 1991 by Munich smart-card maker Giesecke+Devrient, who sold the first 300 SIM cards to Finnish wireless network operator Radiolinja. These initial SIM cards were the size of a credit card.
The most recent innovation is the e-SIM which replaced the physical card with a software version. This e-SIM is now the standard for most if not all cell phones. Now we have arrived at the challenge.
When phones had a physical SIM card the thief had to physically possess the SIM card to use it which required stealing the phone with the card inside. Now with the e-SIM, there is no need to have a physical phone. All a thief needs are enough personal information factoids to convince your cell phone carrier that your original phone is lost, and they need to have a new phone assigned to your number.
Yes, they can remove your current number from your phone and have it on a new one in minutes. With that number, they can use text-based multifactor authentication to steal your accounts. Now the question posed earlier becomes reality. What would happen to your business if your cell phone number was hijacked?
For reference, my cell phone holds sixty, yes 60, authentications. There are also about another thirty websites and services that do not use an authenticator application, so they text a code to my phone. In total that makes NINETY accounts that would be compromised.
How does one solve this challenge without buying more software?
The action to secure your phone is to work with your cell phone carrier and set up a PIN code on your account which is required to be provided before anyone, at any time, in person or over the phone to make changes. Yes, this change will require us to always have the security code available for anything we do with our carrier. Yes, it can be a hassle. Yes, it is free, and it works.
Remember that Lead IT Consulting is here to help small businesses understand and navigate challenges in the IT landscape so your business can grow. We eat, live, and breathe navigating IT challenges daily to minimize risks and work for our clients. To find out more about how Lead IT Consulting can help your company with this and more book a meeting with the author or send an email to happiness@leaditconsulting.net
