[kwlug-disc] voip.ms referral

[Jason]

I haven't set up SMS yet, but I have used Zoiper and with a VPN connection,
everything seemed to work fine for audio.

Bitwarden has TOTP and Pasword management as well.

If someone else wants to do a FreePBX presentation, that would be a good
topic... I've got a lot of other stuff I'm working on at the moment :)


On Fri, Apr 4, 2025 at 6:19 PM Anton Avramov via kwlug-disc <
kwlug-disc at kwlug.org> wrote:

> Yes, SMS is very VERY insecure still, although they try to upgrade.
>
> Here is more on the subject:
> https://youtu.be/wVyu7NB7W6Y?si=RjRG3TxX7OMwNsfD
>
> The problem is that some services doesn't give you other options :(
> After watching the video I try to avoid them as much as I can and host my
> own instance of PassBolt.com which can store password and TOTP
> Although storing both on the same place kind of defeats the purpose ;)
>
> On Fri, 2025-04-04 at 18:02 -0400, Khalid Baheyeldin wrote:
>
> On Fri, Apr 4, 2025 at 4:24 PM Giles Malet <gdmalet at gmail.com> wrote:
>
> On 04/04/2025 09:20, Anton Avramov via kwlug-disc wrote:
> > Did you setup the SMS also?
> > If so, did you ever try them for code verification?
>
> I have a problem with banks etc. insisting on sending SMS verification
> codes on login (because it is secure, hah!), but with a Koodo SIM card
> that doesn't work anywhere other than Canada I'd be stuck while
> travelling, which I do a lot.
>
>
> I fully agree with you Giles ...
> SMS is a lousy way for authentication, for all the reasons you mentioned.
> And one more reason: criminals steal the SIM somehow (social engineering
> with carrier staff, insider collusion, ...etc.).
> They can take over anything that you used SMS for authentication.
>
> I know someone whose SIM was stolen that way twice!
>
> The good thing is that some web sites and even the CRA are moving
> to time-based one time passwords (TOTP). That means you can use
> a app like FreeOTP+, as well as command line tools, such as oathtool.
>
> So, I give them a voip.ms number, they
> send the SMS, and voip.ms sends me an e-mail, which I can easily receive
> anywhere in the world, almost instantly, even on hotel wifi. I've been
> doing this for years, and never had a problem (touch wood).
>
>
> That is a good way to do it for the remaining stragglers.
>
> _______________________________________________
> kwlug-disc mailing list
> To unsubscribe, send an email to kwlug-disc-leave at kwlug.org
> with the subject "unsubscribe", or email
> kwlug-disc-owner at kwlug.org to contact a human being.
>
>
> _______________________________________________
> kwlug-disc mailing list
> To unsubscribe, send an email to kwlug-disc-leave at kwlug.org
> with the subject "unsubscribe", or email
> kwlug-disc-owner at kwlug.org to contact a human being.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20250404/30a384c8/attachment.htm>