I just read an article that stated that Comcast set their port out pin to 0000 which allowed attackers to port a Comcast mobile phone number as long as they know someone's address (public) and their Comcast mobile account number. This effectively allowed attackers to steal the phone number from a number of Comcast Mobile customers and then pretend to be that person with businesses and banks and the like.
https://arstechnica.com/information-tec ... e-numbers/
From what I've read here in the forums OOMA doesn't even have a PIN and the account number associates with an OOMA phone number is the phone number itself. Also the port out address is OOMA's name and address, not the customer's name and address (though finding the customers name and address wouldn't be that hard).
That means that all someone needs to port your phone number away from OOMA is the phone number itself. That seems like a huge security flaw.
https://www.nextadvisor.com/blog/phone- ... ne-number/
How does OOMA prevent anyone from just porting out your phone number?