2017-09-26 UTC
# 
tantek SMS << 2017-07-06 @justin: "[https://twitter.com/justin/status/883171036283285508 Someone socially engineered AT&T to get a new SIM for my phone, signed into my Paypal (using 2FA) and withdrew a bunch of money.]" (was actually done by SMS password reset / account recovery on [[PayPal]], see posts in tweet thread)