This reminds me of how I hacked twitter 10+ years ago to get free SMS delivery for a web app I built. Before Twilio, custom SMS notification delivery was hard and expensive. At the time, twitter allowed you to receive SMS notifications of tweets posted to a followed account. I created a private account and used twitter's API to post tweets to with the notification content I wanted to send. I then had "dummy" accounts…
Twitter kills off SMS notifications and posting in most countries
131–140 of 158 posts
Re: Twitter kills off SMS notifications and posting in most countries
#132This reminds me of how I hacked twitter 10+ years ago to get free SMS delivery for a web app I built. Before Twilio, custom SMS notification delivery was hard and expensive. At the time, twitter allowed you to receive SMS notifications of tweets posted to a followed account. I created a private account and used twitter's API to post tweets to with the notification content I wanted to send. I then had "dummy" accounts…
Re: Twitter kills off SMS notifications and posting in most countries
#133Re: Twitter kills off SMS notifications and posting in most countries
#134He writes: "Of course if that’s a major problem, then offering 2FA logins and password verification via cell phone wouldn’t make much sense either." But this is not necessarily true, as spoofing a source phone number of an SMS is a lot easier than receiving an SMS that was sent to another number.
Many Telegram accounts were compromised in Iran a while ago because of this. https://www.wired.com/2016/08/hack-brief-hackers-breach-ultr... Similarly I know for a fact that in many countries your GSM provider stores your texts so you can view/reply them from their web portal. (As you can imagine despite an attacker might not have your SIM card, they might find your user/pass to log in your GSM provider's portal.)
Also state-sponsored actors do tap into GSM operators since SMS is not end-to-end encrypted. Add this to the previous attack vector and you'll see that wiretapping inbound SMS is surprisingly not that hard.
Re: Twitter kills off SMS notifications and posting in most countries
#135He writes: "Of course if that’s a major problem, then offering 2FA logins and password verification via cell phone wouldn’t make much sense either." But this is not necessarily true, as spoofing a source phone number of an SMS is a lot easier than receiving an SMS that was sent to another number.
Not if you live in a surveillance state such as many middle-east countries. Many Telegram accounts were compromised in Iran a while ago because of this. https://www.wired.com/2016/08/hack-brief-hackers-breach-ultr... Similarly I know for a fact that in many countries your GSM provider stores your texts so you can view/reply them from their web portal. (As you can imagine despite an attacker might not have your SIM ca…
Re: Twitter kills off SMS notifications and posting in most countries
#136Earlier quoted context omitted.
Are dynamic DNS services no longer a thing?
Yep, free dynamic DNS still exists, for example NoIP https://www.noip.com/ However, you have to refresh it each month by filling out a "I'm still using it" web form they email you. So, you can't just set it & forget it.
Works in the free tier as set and forget. As long as you keep updating it (with whatever API), it works. Filling out a form manually makes NoIP sound like a horrible service.
Re: Twitter kills off SMS notifications and posting in most countries
#137So Dan was a freeloader, instead of HIM paying the cost to notify HIS subscribers (aka TWITTER followers), he externalised/rolled off the cost to Twitter. Now that Twitter wants to do some cost-cutting and Dan has to pay HIS own "phone bill" for HIS customers, Dan is calling out on Twitter? Suck it up bro.
When I hear people complaining that "in our office they changed the coffee to a shittier one", I know what this is a prelude for avalanche of cost cutting measures. SMS in Twitter are being switched off? Blame the folks that created their business on someone else's £€¥$ and the Twitter shareholders came calling for more profit.
I wonder what are the savings that Twitter is making by flipping that switch off...
Re: Twitter kills off SMS notifications and posting in most countries
#138Earlier quoted context omitted.
For me, an occasional reader without a Twitter account, the experience became much worse in the past decade. That's because Twitter switched of RSS feeds and when opening links to individual tweets nowadays there is this ubiquitous "Something Went Wrong, Try Again" on first page load.
If I'm not mistaken that "Something Went Wrong" is their web API keys being throttled...
sigh
Re: Twitter kills off SMS notifications and posting in most countries
#139Earlier quoted context omitted.
Yep, free dynamic DNS still exists, for example NoIP https://www.noip.com/ However, you have to refresh it each month by filling out a "I'm still using it" web form they email you. So, you can't just set it & forget it.
it really isn't that hard to set up dynamic dns yourself. like maybe a day of work. just don't forget to upgrade your dns server software when exploits are discovered
All but the worst of the worst providers have an API of some sort and if you're savvy enough to set up BIND, you can handle writing a curl command to post your IP to the API and sticking it into cron.
Re: Twitter kills off SMS notifications and posting in most countries
#140Earlier quoted context omitted.
A twitter-like service whose only ban-able TOS violation (besides obviously illegal stuff) is to post any political content... that sounds amazing! I’d be there in a heartbeat.
The thing is, everything is political. Take LGBT people, especially trans people. Their entire right to existence is a hotly debated topic. Same for abortions. Religions. Sport events. Porn preferences. Sex work. Even such utterly mundane things as lipstick. Take that out and you'd be left with essentially a feed of cute animals and still get fights between people arguing if dogs or cats are cuter.