Live data from Hacker News

Gmail registration now requires scanning a QR code and sending a text message

discuss.privacyguides.net

31–40 of 549 posts

Re: Gmail registration now requires scanning a QR code and sending a text message

#31

Earlier quoted context omitted.

Tuta, Fastmail, and Posteo are all much better alternatives to Gmail in terms of privacy. My comment, as per subject, is about Gmail.

His point was just that many business users can only purchase Google’s solution or Microsoft’s solution, because they’re the only services that will offer interoperability with many other security and compliance services and advanced functionality like SSO, third party email scanning, compliance journaling etc. The email market is essentially a duopoly as soon as you need any functionality beyond basic email.

The simple fact that you believe this is insane to me. Microsoft?Security and compliance? Ahhh, yes the north star of security!

No, you don't need either of these companies if you need a corporate stack for communication and collaboration. And anyone who believes Microsoft or Google is doing anything out of the ordinary to protect their users or data is out of the loop.

Re: Gmail registration now requires scanning a QR code and sending a text message

#32
post #9
post #7

Earlier quoted context omitted.

The same 5 urls has been used for 3 months

That doesn't really change the fact that it's hard. Do you know how many full movies are on YouTube that infringe on copyright? How many pirated streams are hosted on S3? How many piracy sites are behind Cloudflare. It's just very hard to police at scale and if something is flying below the radar it will be there for a while. They probably spread out their assets over many accounts, or even use misconfigured buckets…

I kinda lost the plot here - what does piracy have to do with spam and phishing?

Re: Gmail registration now requires scanning a QR code and sending a text message

#33

> Supposedly, using the QR code on the smartphone triggers an SMS sent from your phone to Google in order to verify your phone number. Does anyone have a better source of information than this one forum comment from someone who thinks scanning a QR code is enough to get your phone to send a text message? EDIT: It’s just an SMS URI. It doesn’t automatically send anything, just opens a text message for you to send. Thi…

It probably opens a prefilled text message and the user still has to hit send. That's the only API I know on iOS anyway.

Re: Gmail registration now requires scanning a QR code and sending a text message

#34

> Supposedly, using the QR code on the smartphone triggers an SMS sent from your phone to Google in order to verify your phone number. Does anyone have a better source of information than this one forum comment from someone who thinks scanning a QR code is enough to get your phone to send a text message? EDIT: It’s just an SMS URI. It doesn’t automatically send anything, just opens a text message for you to send. Thi…

https://datatracker.ietf.org/doc/html/rfc5724#section-2

Re: Gmail registration now requires scanning a QR code and sending a text message

#35

> Supposedly, using the QR code on the smartphone triggers an SMS sent from your phone to Google in order to verify your phone number. Does anyone have a better source of information than this one forum comment from someone who thinks scanning a QR code is enough to get your phone to send a text message? EDIT: It’s just an SMS URI. It doesn’t automatically send anything, just opens a text message for you to send. Thi…

I think it's probably enough to get your phone to open your texting app with a pre populated number and message body, then all the user needs to do is hit send.

Re: Gmail registration now requires scanning a QR code and sending a text message

#37
post #32
post #9

Earlier quoted context omitted.

That doesn't really change the fact that it's hard. Do you know how many full movies are on YouTube that infringe on copyright? How many pirated streams are hosted on S3? How many piracy sites are behind Cloudflare. It's just very hard to police at scale and if something is flying below the radar it will be there for a while. They probably spread out their assets over many accounts, or even use misconfigured buckets…

I kinda lost the plot here - what does piracy have to do with spam and phishing?

both deal with distinguishing legitimate vs illegitimate content.

Re: Gmail registration now requires scanning a QR code and sending a text message

#38

Earlier quoted context omitted.

His point was just that many business users can only purchase Google’s solution or Microsoft’s solution, because they’re the only services that will offer interoperability with many other security and compliance services and advanced functionality like SSO, third party email scanning, compliance journaling etc. The email market is essentially a duopoly as soon as you need any functionality beyond basic email.

The simple fact that you believe this is insane to me. Microsoft? Security and compliance ? Ahhh, yes the north star of security! No, you don't need either of these companies if you need a corporate stack for communication and collaboration. And anyone who believes Microsoft or Google is doing anything out of the ordinary to protect their users or data is out of the loop.

It's not about actual security; it's about the appearance of it. It allows CTOs and such to check a box to say "Why yes, our vendor is secure! Look at all their claims! Look at how many other companies use them!" That's it. Safety in numbers for clueless CTOs.

Re: Gmail registration now requires scanning a QR code and sending a text message

#39
post #33

> Supposedly, using the QR code on the smartphone triggers an SMS sent from your phone to Google in order to verify your phone number. Does anyone have a better source of information than this one forum comment from someone who thinks scanning a QR code is enough to get your phone to send a text message? EDIT: It’s just an SMS URI. It doesn’t automatically send anything, just opens a text message for you to send. Thi…

It probably opens a prefilled text message and the user still has to hit send. That's the only API I know on iOS anyway.

Can confirm this is what scanning the QR code does. I just went through this to get my Google dev account verified.

Re: Gmail registration now requires scanning a QR code and sending a text message

#40

> Supposedly, using the QR code on the smartphone triggers an SMS sent from your phone to Google in order to verify your phone number. Does anyone have a better source of information than this one forum comment from someone who thinks scanning a QR code is enough to get your phone to send a text message? EDIT: It’s just an SMS URI. It doesn’t automatically send anything, just opens a text message for you to send. Thi…

Regarding how easy simswap is in 2026, it's dangerously stupid from Google to rely on SMS
Post reply on HN