331–340 of 386 posts
Earlier quoted context omitted.
Yet another reason why SMS 2FA should not be used. Shameful.
What is a better 2FA channel?
No communication occurs to serve your 2fa code - it's a time based 2fa protocol.
Earlier quoted context omitted.
What is a better 2FA channel?
Any dedicated MFA app, such as Authy.
Beware the edge case: I responded STOP to a message years ago, then was unable to receive SMS from a popular money transmission app during the signup flow to claim funds that a friend sent me. After over a month of troubleshooting, it turns out that I had sent "STOP" to that number years ago on a different device (no longer visible in chat history) and now had to send "UNSTOP" in order to receive the phone verificati…
Just wanted to say that I find it curious that you have to text “UNSTOP” and not something like “START”, lol
Beware the edge case: I responded STOP to a message years ago, then was unable to receive SMS from a popular money transmission app during the signup flow to claim funds that a friend sent me. After over a month of troubleshooting, it turns out that I had sent "STOP" to that number years ago on a different device (no longer visible in chat history) and now had to send "UNSTOP" in order to receive the phone verificati…
This happened to me with a major bank. They were using the same number for 2FA and some other types of texts. I got locked out of my account for a while because I had unsubscribed from their marketing texts. What an unbelievably dumb way to send 2FA codes.
In my experience it doesn't do much. For example, I made the mistake of contributing to the campaign of a politician. Now I get texts from candidates all over the country. If I reply STOP to one, I just get sent more texts from another number, for another candidate in another state. I just got tired of replying with STOP after the 20th time. This just guarantees I'm never giving any money to any candidate ever again.
I often use the “Report junk” button on iOS but after spending years being bombarded with political SMS messages that I didn’t sign up for (always addressed me by the wrong name, and I’ve had my number for well over 20 years) I finally got relief. I found out which provider was sending the SMS and contact their abuse line (I would reply STOP but they would just send from a different phone number) and got the name of…
Well, whats the company?!
Earlier quoted context omitted.
Just wanted to say that I find it curious that you have to text “UNSTOP” and not something like “START”, lol
Unfortunately, the world is opt-out, not opt-in.
Of course, there are unscrupulous parties who don't respect this.
Earlier quoted context omitted.
Twilio is sort of a dream for spammers, they'll just make new accounts on it and spam campaigns on those new accounts. Political organizations do it all the time, if you get on a list you're never getting off. Lookup the numbers sending to you (Twilio's own lookup tool works great for this) and it almost always comes back Twilio/Zipwhip. I only recommend responding STOP to short codes since there's more investment an…
I think Twilio requires its customers to go through the process of registering with the CTIA before allowing use of the SMS API. I abandoned a project because the process was too burdensome. Political campaigns are exempt though.
(Which, as an end-user, I'm happy about...)
Earlier quoted context omitted.
No, this is specifically for the case of someone intentionally signing up to receive the texts first. Had they been unsolicited, the outcome would have been the exact opposite. The take away is don’t sign up for SMS spam, send obtuse opt out messages, and then expect a payday in court.
> No, this is specifically for the case of someone intentionally signing up to receive the texts first. How do they know I consented vs the person who had the number prior to me? I recieve texts I didn't sign up for all the time for companies I've never heard of for people with names and addresses that are different than mine. I really feel the burden of consent should be on the sender vs the receiver. Think of it th…