Root Causes 685: A phone number is not an identity

In this episode about the security risks of treating a phone number as an identity, Jason and Tim discuss why a telephone number is merely a routing label for potential reachability rather than a proof of who is on the other end. They examine how silent SIM-swapping attacks, three-line mobile SMS redirection malware, low-entropy knowledge-based verification questions, and AI voice cloning render telephone-based authentication and SMS OTPs below an acceptable security threshold.