10Haz
Are there any security benefits to enabling the PIN on an eSIM?
For physical SIMs, I'm aware of a number of security benefits to enabling the SIM PIN, because for an attacker with access to a lost or stolen SIM, a PIN prevents transferring the SIM to a different phone, where they could:
- Gain access to existing voice mail stored on the service.
- Receive new SMS (including 2FA tokens sent by SMS).
- Make premium phone calls to numbers they can profit from.
- Access any other data stored on the SIM (less relevant with modern phones that typically don't store things like contacts on SIMs anymore)
But since an eSIM can never be removed from the device, and assuming the device itself is locked, such threats are not feasible. However, I noticed that it is still possible to enable the PIN on an eSIM, and I was able to find out the default PIN from my provider. So I'm wondering if there are any actual security benefits gained by enabling it?
