News for hackers. Stuff that matters.
Re:Can We Stop Pretending SMS Is Secure Now? by switch007 on Wednesday March 17, 2021 @06:30AM (#26489042)
Can we stop pretending that the faux concern for the security of our accounts by tech giants was anything other than an excuse to harvest our phone numbers?

Twitter for example let's you sign up without a number but it then suddenly detects "suspicious activity" and demands your number. Many other sites enforce it or heavily nag you in the name of security.

Re:Can We Stop Pretending SMS Is Secure Now? by prepend on Wednesday March 17, 2021 @08:47AM (#26490313)
Same with collecting birth dates. It’s just a convenient way to target ads.

I’ve been trying to get Google to stop giving out my birthday for years when I had to enter it for wallet or something. I get birthdays on my calendar from people I emailed once and never knew, or wanted to know their birthday.

Similarly, my contacts have gotten peoples phone numbers changed based on changes made in various subsystems that overwrote the number that I manually entered.

Re:Can We Stop Pretending SMS Is Secure Now? by jdeibele on Wednesday March 17, 2021 @02:41PM (#26495211)
I standardized on giving 1/1/1970 [1] as the date of birth except where I feel my actual birthdate is required.

With online ancestry sites (birth place, mother's maiden name, first name of paternal grandfather), Facebook and Classmates.com (high school mascot, pet's name) and so on it feels like anything "real" could be compromised. Or give somebody enough ammunition to pretend to be me.

I use fake answers but it means carefully logging the answers so I don't forget them.

1. https://unix.stackexchange.com/questions/26205/why-does-unix...

Re:Can We Stop Pretending SMS Is Secure Now? by prepend on Wednesday March 17, 2021 @07:43PM (#26498182)
I like 2/29 as some systems are dumb enough to only bug me once every four years instead of once a year.
Re:Can We Stop Pretending SMS Is Secure Now? by jjav on Wednesday March 17, 2021 @03:20PM (#26495692)
Recommended. Always use different fake answers to everything, be sure to log them in wherever you keep your passwords managed though.

Funny how my best friend from high school is named yiKooPh2 (not a real value of course).

Re:Can We Stop Pretending SMS Is Secure Now? by HenryBemis on Wednesday March 17, 2021 @07:37AM (#26489626)
It's called "bait and switch".

Similar dick-ish behaviour on Steam. I didn't have a 'profile to comment' on the comment section of a game (Saboteur 2 - Avenging Angel)(I cannot remember the room that gives you the 'god mode')

I went on to create a 'profile to comment'. When I proceeded to write the actual comment I was informed that 'I am not allowed to comment on this game' (I had already logged in with my Steam account. Those *** just wanted the extra info only to tell me what they knew (that I would not be allowed to comment anyway). I deleted said 'profile to comment' but now those *** will keep that info forever.

This is not related to SMS (I thought we established that even with someone with $50k -or less- to burn can read the SMS messages of their neighbours)(https://www.intercept.ws/catalog/interceptors/)

Re:Can We Stop Pretending SMS Is Secure Now? by deepstack on Wednesday March 17, 2021 @07:08AM (#26489369)
Exactly! Same with Google, FB. Disk space is almost free, let who ever sign up.
Re:Can We Stop Pretending SMS Is Secure Now? by b0afc375b5 on Wednesday March 17, 2021 @07:13AM (#26489419)
As a devil's advocate, how about the notion that requiring mobile numbers mitigates, if only a little, automated spam?
Re:Can We Stop Pretending SMS Is Secure Now? by scaladev on Wednesday March 17, 2021 @07:40AM (#26489659)
In my country you can easily buy a few thousand SIM cards for a cent or two each. I've seen them in classified ads, they're not even hiding.
Re:Can We Stop Pretending SMS Is Secure Now? by livre on Wednesday March 17, 2021 @08:15AM (#26489998)
Same in mine, spammers buy blocks of numbers (for example all numbers from XXXXX100 to XXXXX999) and use them to avoid being blocked by people who block individual phone numbers (with the default phone app). Fortunately I found Yet Another Call Blocker on F-Droid and I can block by pattern with it (XXXXX*) but most less technical people won't be doing that.
Re:Can We Stop Pretending SMS Is Secure Now? by bozzcl on Wednesday March 17, 2021 @12:13PM (#26493182)
You don't even need that, at least in America. Phone spoofing is terrifyingly easy.
Re:Can We Stop Pretending SMS Is Secure Now? by mandelbrotwurst on Wednesday March 17, 2021 @11:10AM (#26492291)
Do you not have to pay a network provider in order to use it to make calls and send messages? How does this work?
Re:Can We Stop Pretending SMS Is Secure Now? by deepstack on Wednesday March 17, 2021 @08:38AM (#26490198)
Personally I don't really mind receiving too much info (asid from DoDS attach of course). Bayesian running locally is pretty good at filtering out spam any way. Stop pretend to corporate nannying us.
Re:Can We Stop Pretending SMS Is Secure Now? by nulbyte on Wednesday March 17, 2021 @07:20AM (#26489477)
The problem with that is, if you are going to automate spam, you can afford a burner. Or heck, just pay the $16 or so and hijack someone else's number.
Re:Can We Stop Pretending SMS Is Secure Now? by ehnto on Wednesday March 17, 2021 @07:37AM (#26489633)
I don't think that's true. For one, the sign up of the accounts itself is often automated and in the hundreds, because bot accounts are squashed all the time. You'd spend thousands on burners.

Spam is mostly prevalent because it's cheap and easy to throw millions of requests at the wall and see what sticks. If it did cost really any money at all it wouldn't be remotely worth it.

Re:Can We Stop Pretending SMS Is Secure Now? by erhan24 on Wednesday March 17, 2021 @07:25AM (#26489513)
Spammers don't just use one account to spam.
Re:Can We Stop Pretending SMS Is Secure Now? by HenryBemis on Wednesday March 17, 2021 @07:56AM (#26489807)
There are free services where you can see a number to get that 'activation code'. Plenty of such services out there.. (a quick search in DDG and this is the top result)

https://mytempsms.com/receive-sms-online/country.html

Re:Can We Stop Pretending SMS Is Secure Now? by b0afc375b5 on Wednesday March 17, 2021 @08:00AM (#26489849)
When twitter suspended my account after creation I tried to use these type of services. Unfortunately every number I tried resulted in an error.