Friend.tech, the decentralized social network, has announced an updated feature that paves the way for users to add and remove login methods following high-profile SIM-swaps incidents. This move encompasses an innovative attempt to augment security measures, yet it is not devoid of skeptical undertones.
Before delving into the complexities of this feature, let’s first dissect the unfortunate situation that triggered this upgrade. On October 4, numerous Friend.tech users fell prey to security exploits where their accounts were compromised following unauthorized access to their mobile numbers; a phenomenon known as SIM swaps. As a result, a menacing amount of over 100ETH was reportedly drained in just one week.
In response to this outbreak of cybercrime, Friend.tech has made the login settings more accessible, allowing users to directly add or remove login methods from their wallets. While this initiative will undoubtedly enhance individual control over account security, it has received flak from users who were quick to point out potential limitations.
One quibble raised by users is the absence of a two-factor authentication, an additional layer of security that is generally deemed indispensible. Friend.tech counter-argued that the current platform may result in users locking themselves out of their accounts, and has thereby enlisted Privy’s services to enhance privacy features.
Furthermore, some users complained that they were not prompted to confirm their passcodes when mistyped and could not reset it through either Privy or Friend.tech. Others have reported the persistence of sessions being active on multiple devices, even after altering the authentication type, which theoretically keeps the door open for potential hackers. This seems paradoxical, given that strengthening security was the driving force behind this feature’s introduction.
These concerns are not to be brushed under the rug, but to be thoroughly examined. Through an objective lens, the unnerving efficiency of the hackers and the speed at which they executed the SIM swap incidents are grave indicators of the advanced threats poised against blockchain-based systems.
The quest for security, it appears, is a continual battle – even for noteworthy platforms like Friend.tech. At the crux of this discussion lies the question; in an ever-evolving digital landscape where hackers are continually upgrading their tactics, can we ever attain absolute cyber security? The answer isn’t as straightforward as technology enthusiasts would hope, and the struggle between perpetually advancing security measures and increasingly sophisticated hackers is an engagement that will transpire into the foreseeable future.
Source: Cointelegraph
