Thread by @DoveyWan

Remedy that all crypto and non crypto who cares about identity theft should be aware

𝐂𝐄𝐋𝐋 𝐏𝐇𝐎𝐍𝐄 𝐍𝐔𝐌𝐁𝐄𝐑 𝐈𝐒 𝐘𝐎𝐔𝐑 𝐖𝐄𝐀𝐊𝐄𝐒𝐓 𝐒𝐏𝐎𝐓 𝐒𝐎 𝐓𝐑𝐘 𝐍𝐎𝐓 𝐓𝐎 𝐔𝐒𝐄 𝐈𝐓 𝐈𝐍 𝐀𝐍𝐘 𝐕𝐄𝐑𝐈𝐅𝐈𝐂𝐀𝐓𝐈𝐎𝐍 𝐏𝐑𝐎𝐂𝐄𝐒𝐒 𝐈𝐅 𝐏𝐎𝐒𝐒𝐈𝐁𝐋𝐄

Thread 👇🏻

https://twitter.com/DoveyWan/status/1089395968187875328

1. Don’t use number from @ATT @verizon @TMobile @sprint basically all US carriers in any verification process or link to any digital account other than pure tele communication.

It seems like Vodafone and Spark NZ can be easily stolen too, feel free to add more to the list

2. When setting up 2FA, use google authenticator instead of SMS 2 step verification, any information exposed to your phone number is not safe @tommyp408 made a nice quick tip of it

3. For single, telegram etc they usually offer local 2 step verifications, try to use Face ID/a local 4 digit pins etc to further make sure getting a phone number is not enough to compromise your IM account

4.Wechat and Alipay are quite smart in the sense wechat will require to recognize friends’ profile pics from a random selection of 9 profile pics, alipay will require you to select all the purchase you’ve made

Such knowledge based verification is not perfect but effective

5. For banks accounts, try to get the physical security keys (something like below) which generate one time random passcode instead of any other 2FA/2step verification via SMS/phone call.

Again, any information exposed to cell phone number is not safe

6. I personally recommend USB security key 🔑 @Yubico offers a variety selection. howtogeek.com/232360/how-to-… it’s pretty handy and hassle-less once you have the onetime set up

This is a default opsec adopted by many valley tech firm including Google

7. Try to switch to @googlefi, maybe the best virtual sim service out there and a great product for people travel 🧳 internationally a lot.

It’s funny that many people complain about Fi’s lacking of customer support but @wheatpond and I consider it as a great opsec feature