More than 1k people at Twitter had ability to aid hack of accounts

Re:More than 1k people at Twitter had ability to aid hack of... by yuliyp on Thursday July 23, 2020 @11:09PM (#23935306)

Something like Require-Recipient-Valid-Since from SMTP? That would be neat. Does SMS have the necessary protocol flexibility to allow that to be added?

[ Parent | on HN ]

Re:More than 1k people at Twitter had ability to aid hack of... by shakna on Friday July 24, 2020 @12:21AM (#23935700)

The User Data Header of SMS [0] isn't very flexible, and quite constrained - both it and the message needs to fit inside a 140 byte payload.

There are a handful of bytes reserved for a future purpose, which could be used for something like this, but you're limiting how large the message can be, likely significantly.

[0] https://en.wikipedia.org/wiki/User_Data_Header

[ Parent | on HN ]

Re:More than 1k people at Twitter had ability to aid hack of... by rutthenut on Friday July 24, 2020 @04:11AM (#23936993)

For SMPP, there is the option to add further data using 'TLV' (Tag/Length/Value) parameters, not only UDH properties.

[ Parent | on HN ]