OT: How Secure are QR Codes?

Apr 28, 2024 Last reply: 2 years ago 37 Replies
Saved reading

But surely in these cases where people have had their accounts emptied after their phone was stolen (*), were not 'new' banking app customers.

(*) several cases have been reported and the banks have initially refused to reimburse, insisting that the customer had disclosed their personal details.

It's not 10 days as a new app customer, but 10 days for a new device.

What is a SIM PIN?

I just put sims in phones and they work?

That is precisely the issue isn't it?

Do you have a reason for not securing your SIM? Do you lock your mobile phone?

I did once, but not any more. Is that what you mean by a SIM PIN?

My solution is to not store anything on my mobile phone except the necessary gmail email passwords and so on. Which can be changed in a moment

I do not regard it as a sensible device to use for secure logins.

No

Hopefully not using your telephone number for identification purposes

If you have any amount of credit on your SIM then that can get swalled up. If you are on a contract then a very large bill could arise if the wrong people had you SIM. They simply call a premium number which they own and swallow all your credit.

What do you consider a sensible device for secure logins? I'm finding every other financial site I go to now sends me a One Time Password before I can proceed.

And when I have moved a SIM to a different phone, usually to see if that phone is working properly, I have never had to supply a PIN before it would work in the phone being tested.

AnthonyL snipped-for-privacy@please.invalid wrote

Nope.

Changing the PIN doesnt secure your SIM because none of my phones has ever asked for the PIN when the SIM is inserted in it.

I certainly do now that they have touch ID because that is so easy to use when I need to unlock it.

Well you'll be wasting your time putting my SIM in your phone, 3 strikes and out.

And I'd have no problem putting NTP's SIM in my phone should I ever get the opportunity, which is a potential issue for him, so I'm not sure what your point is.

Anthony seems to be failing to actually explain what he is taking about in a way that would make any sense to someone who is not already familiar with the concept :-)

Normally when you get a new "unlocked" SIM, you can just plug it into a phone and it will work. Many people might turn on security on the phone itself so that it needs unlocking to use it (with a PIN, or fingerprint, or face recognition etc). However that does leave a weakness if someone pinches the phone. They might not be able to get into the phone, but they can take the SIM out and put it into a new phone, and then have access to the phone number and ability to receive SMS for that number.

With a bit of background info that can be a "way in".

You can however apply lock to the SIM so that it is tied to the phone, and will not "just work" if you move it to another. Try it in a new phone, and there will be no network or data access without the PIN.

Here is the step by step for setting the PIN:

formatting link

Be my guest. Theres f*ck all on it of any value to anyone

The "value" is not the phone so much as the phone service - being able to receive SMS messages sent to your mobile number is one way round 2FA for those with larcenous intent.

Indeed, perhaps I had overestimated NTP's ability to do an internet search given his extensive technical knowledge but I suspect he's just being somewhat obstinate.

It is however a reminder to me to lock my 2nd SIM which was just

200Mb/month free data only but now is much more and hence being used a lot more.

Even searching is not a sure-fire route to clarity, given usage of terms like "sim locked" in relation to phones themselves rather than sims, and the various terms used for locking the phones.

No it is a mark of how completely uninterested I am on mobile phones and their attendant 'apps' My phone allows me to enter a 'screen lock' 4 digit PIN There is nothing on it that mentions a SIM PIN.

On some obscure menu it mentions a SIM card lock.

Which is fine, but this is not really a phone or an app "thing". If you have not used your mobile number to enable reception of 2FA one time passcodes, then there is nothing much to worry about.

Usually:

Settings -> Security & Location -> Advanced -> SIM Card Lock

For the technologically limited...

My Nokia might be capable of using a *banking app* however, I never use it for this purpose.

How vulnerable does this make a theft of my phone where I haven't bothered to even lock the keypad? Surely my first move would be to notify my provider?

I can see *on line* shopping with the likes of Amazon might be possible if they also had control of my e-mail but password changes are notified.

Depends on when you notice that its missing, and how easy that is to do when you notice that it has gone missing.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required