OWASP/www-community

sim swapping

Open

#103 opened on Apr 6, 2020

View on GitHub
 (16 comments) (0 reactions) (1 assignee)HTML (933 stars) (607 forks)batch import
enhancementgood first issue

Description

I read more and more articles about the dangers of sim swapping. Would be nice to have some guidelines on how to prevent such attacks.

Example article https://www.vice.com/en_us/article/pke9zk/paypal-and-venmo-are-letting-sim-swappers-hijack-accounts

Contributor guide

Tech stack
None
Domain
securitydocumentation
Issue type
documentation
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
basic understanding of SIM swappingfamiliarity with OWASP style
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
Research SIM swapping attacks and existing OWASP guidelines. The issue requests a new page similar to other OWASP community pages. Look at the repository structure and other pages for formatting. No linked PRs or maintainer questions visible; the issue is old and assigned, so consider reaching out to the assignee.
sim swapping · OWASP/www-community#103 | Good First Issue