[kwlug-disc] voip.ms referral

[Anton Avramov]

Yes, SMS is very VERY insecure still, although they try to upgrade. 

Here is more on the
subject: https://youtu.be/wVyu7NB7W6Y?si=RjRG3TxX7OMwNsfD 

The problem is that some services doesn't give you other options :( 
After watching the video I try to avoid them as much as I can and host
my own instance of PassBolt.com which can store password and TOTP
Although storing both on the same place kind of defeats the purpose ;)

On Fri, 2025-04-04 at 18:02 -0400, Khalid Baheyeldin wrote:
> On Fri, Apr 4, 2025 at 4:24 PM Giles Malet <gdmalet at gmail.com> wrote:
> > On 04/04/2025 09:20, Anton Avramov via kwlug-disc wrote:
> > > Did you setup the SMS also?
> > > If so, did you ever try them for code verification?
> > 
> > I have a problem with banks etc. insisting on sending SMS
> > verification 
> > codes on login (because it is secure, hah!), but with a Koodo SIM
> > card 
> > that doesn't work anywhere other than Canada I'd be stuck while 
> > travelling, which I do a lot. 
> > 
> 
> 
> I fully agree with you Giles ... 
> SMS is a lousy way for authentication, for all the reasons you
> mentioned.
> And one more reason: criminals steal the SIM somehow (social
> engineering
> with carrier staff, insider collusion, ...etc.).
> They can take over anything that you used SMS for authentication.
> 
> I know someone whose SIM was stolen that way twice!
> 
> The good thing is that some web sites and even the CRA are moving
> to time-based one time passwords (TOTP). That means you can use
> a app like FreeOTP+, as well as command line tools, such as oathtool.
> 
> 
> > So, I give them a voip.ms number, they 
> > send the SMS, and voip.ms sends me an e-mail, which I can easily
> > receive 
> > anywhere in the world, almost instantly, even on hotel wifi. I've
> > been 
> > doing this for years, and never had a problem (touch wood).
> > 
> 
> 
> That is a good way to do it for the remaining stragglers.
> 
> _______________________________________________
> kwlug-disc mailing list
> To unsubscribe, send an email to kwlug-disc-leave at kwlug.org
> with the subject "unsubscribe", or email
> kwlug-disc-owner at kwlug.org to contact a human being.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20250404/b29c875d/attachment-0001.htm>