[dead]
Thanks FedEx, this is why we keep getting phished
531–540 of 576 posts
Re: Thanks FedEx, this is why we keep getting phished
#532Earlier quoted context omitted.
Is it impressive though? They have about a 50% success rate delivering things to me across multiple addresses and I know other people who have had similar long term issues.
"50% success rate delivering packages" is a totally different level of risk from "automated system gives your garage access code to anyone who claims to live there" i mean in the first case what's at risk is the five-dollar trinket you bought off amazon
Or the irreplacable trinket that your aging grandmother sent you.
Re: Thanks FedEx, this is why we keep getting phished
#533Earlier quoted context omitted.
I'm pretty sure that most of the on-screen keyboards for TV / streaming device platforms don't support emoji. (I've spent about 6 years of my career running video streaming services... People watch a lot of video on TVs, it turns out, so you probably don't want to let them put these sorts of characters into their passwords when they sign up on mobile or computer devices.)
For better and a (lot) worse most of the TV / streaming device platforms are Android-derived and have access to emoji keyboards if not intentionally disabled , even on TV form factors. I realize it is a wide spectrum of users and a long tail of devices, but at some point again it isn't a technical reason that we are banning emoji from passwords but a political and lowest common denominator reason. I'm not trying to i…
I'm sure that's true - but, as an application developer and service operator, we don't really have the option to access the keyboards that are hidden by the TV OSs that we are running on.
Additionally, I'm not sure that supporting full Unicode access (or even just the hundreds (?) of emoji) using a D-pad as an input device would be a good UX.
Re: Thanks FedEx, this is why we keep getting phished
#534Does anyone know how to block SMS from marketers without numbers (ex: XYZ instead of 123) on Android?
Re: Thanks FedEx, this is why we keep getting phished
#535Earlier quoted context omitted.
> They have been the most consistently reliable delivery service where I live (though the post office is pretty good too). Every service relies on the USPS to some extent, which makes the Republican attempt to gut the organization so baffling. There's no replacement and nobody is looking to replace it. From my perspective as an ex letter carrier, your personal experience with package delivery is determined almost ent…
It took the 2020 pandemic for Republicans to finally get on board and pass the Postal Service Reform Act of 2022.
Postmaster Dejoy began dismantling critical sorting machines, reducing and limiting overtime, &c only 6 months into lockdown, well before there was a COVID vaccine. Knowing full well the problems it would cause. For example, many remote rural addresses are only serviced by USPS, and people rely on it for timely prescriptions. IMO it was massive public outcry that prevented a great deal more destruction.
https://www.vox.com/2020/8/18/21374014/post-office-usps-loui...
Re: Thanks FedEx, this is why we keep getting phished
#536Earlier quoted context omitted.
I live in an apartment. I get mail for 4 or 5 previous tenants. I get corporate spam. I have unsubscribed from as much as I can, I have a return to sender stamp and have used it, yet I am inundated with trash on a daily basis. Technically, it is illegal for me to throw out this trash. In my opinion there is a massive amount of waste moving through USPS and the organization could use some serious cuts in order to take…
You've done everything except talk to the one human being involved who appears at your residence every single day. If I was your letter carrier and knew you felt this way I'd honestly be hurt that you didn't bother to ask me about any of it. > the organization could use some serious cuts Miss the part about them being the backbone of package delivery in this country? Or the part where there's nobody to replace them?…
> the USPS is financially self-sustaining.
Sarcasm I hope?
https://thehill.com/opinion/congress-blog/4138391-the-usps-n...
Re: Thanks FedEx, this is why we keep getting phished
#537This reinforces the need for "mutual trust security" that I've been calling for now for years. All of the significant authentication schemes are built to validate the customer, and none validate the vendor. When your bank or mobile provider gives you a call : how do you know it's them? They start asking you for personal data right away, but you have no idea who you are sharing information with. We need "mutual authen…
For voice calls, and maybe SMS, there could be mechanism to do bidirectional authentication with words. The problem is that would have to switch to app to generate the words and validate the response. For user, password or passkey would work. For company, the SSL cert on domain might work. Otherwise, would need to download certificates. For SMS and voice calls, it would help if they could implement call authenticatio…
Great ideas
Both could be implemented without apps by using a text message interface
Re: Thanks FedEx, this is why we keep getting phished
#538This reminds me of the IRS phone scams. The IRS does not have an actual voice actor record their phone messages or phone tree, they just use a text-to-speech system that is commercially available
So, the scammers just use the same system so the phone messages you get from them sound like the same voice you hear if you actually call the IRS
For just a little extra money they could pay someone to exclusively record IRS messages and the voice would never be the same as the scammers (at least, until someone replicates the real voice with AI but that's an issue for another day)
Re: Thanks FedEx, this is why we keep getting phished
#539Earlier quoted context omitted.
Can I ask where you live? I'm 40 and have never had anything get lost in the mail, ever. Is it a big city thing or something?
When we lived in San Jose, CA, we had stuff which never arrived quite often. Birthday cards and such especially.
Who sends birthday cards through FedEx?
Re: Thanks FedEx, this is why we keep getting phished
#540Earlier quoted context omitted.
This is included webauthn, which is the basis for both passkeys and fido2 auth. To sign in, you are sent a 'challenge', and must sign it and return it. The challenge includes a "Relaying Party Identifier" (RPID) which is basically the domain of the site requesting authentication. That way, if a phishing domain prompts you for auth, they can not proxy your response because the RPID you signed will not match the authen…
This is good but how to make it work for phone, email and txt messages ?
The way I see it, it works for all the above. Passkeys are available on all devices, and whatever contact method the attackers use will harvest a signed response with an invalid RPID (a credential that won't work).
Is that the point you were making?