News for hackers. Stuff that matters.
Re:Apple Is Blocking Linux User-Agent on appleid.apple.com by jlokier on Friday February 22, 2019 @03:42PM (#19228923)
Have you tested that it works?

According to this other recent HN comment, Twilio numbers cannot be used for SMS verification. Banks and Gmail are mentioned:

https://news.ycombinator.com/item?id=19219150

"I have this problem because my main, personal number is actually a twilio number (as I built my own personal telco within twilio) and this means I cannot receive validation messages from shortcodes (like a bank)."

Re:Apple Is Blocking Linux User-Agent on appleid.apple.com by arthurfm on Friday February 22, 2019 @08:28PM (#19230952)
> Have you tested that it works?

Yes. I wouldn't have mentioned it if it didn't work.

Here's a screenshot showing the Apple and PayPal 2FA codes I have received through Slack via Twilio...

https://i.imgur.com/bQYSbPZ.png

I also don't have any accounts with banks that are stupid enough to use SMS for 2FA [1] so I haven't needed to use my Twilio number for that purpose.

Using SMS for Gmail 2FA doesn't make any sense when Google supports U2F.

[1] https://motherboard.vice.com/en_us/article/mbzvxv/criminals-...

Re:Apple Is Blocking Linux User-Agent on appleid.apple.com by bubblethink on Saturday February 23, 2019 @12:35AM (#19231872)
paypal also supports TOTP through an old trick. Look it up.
Re:Apple Is Blocking Linux User-Agent on appleid.apple.com by sir_brickalot on Saturday February 23, 2019 @10:50AM (#19233814)
I tried to find the "old trick" but only end up on 404s or forum threads that end with "they must have closed that trick now".

Would you mind sharing a working source?

Re:Apple Is Blocking Linux User-Agent on appleid.apple.com by bubblethink on Saturday February 23, 2019 @02:13PM (#19234974)
Perhaps they have close it now then. This was the source: https://medium.com/@dubistkomisch/set-up-2fa-two-factor-auth...
Re:Apple Is Blocking Linux User-Agent on appleid.apple.com by Wintereise on Saturday February 23, 2019 @12:19AM (#19231819)
It's not shortcodes per se, those work fine for the most part.

Twilio/Google Voice (more generally, VOIP numbers) are explicitly being blocked (because it's possible to find out what type of number it is) at a number of services, likely to combat fraud.

I've found MSFT (Azure) and AWS to be recent examples of such services. Google itself does the same.

Re:Apple Is Blocking Linux User-Agent on appleid.apple.com by arthurfm on Friday February 22, 2019 @08:40PM (#19231012)
As further proof that I am not lying here's a screenshot from my Twilio messaging log...

https://i.imgur.com/6b3cg5L.png

62226 = PayPal and 51472 = Apple.