Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers

Re:Twilio Confirms Data Breach After Hackers Leak 33M Authy ... by AnthonyMouse on Thursday July 04, 2024 @05:16PM (#40878117)

"Our democratically controlled communication infrastructure" honestly deserves to be deprecated and replaced with some kind of federated voice system that comes out of the IETF instead of the telcos. What kind of antediluvian nonsense doesn't use end-to-end encryption in 2024?

[ Parent | on HN ]

Re:Twilio Confirms Data Breach After Hackers Leak 33M Authy ... by _heimdall on Thursday July 04, 2024 @08:52PM (#40879149)

AT&T has a long history with three letter agencies. If they ever did implement e2e encryption it would certainly come with backdoors that make it e2e only by name.

[ Parent | on HN ]

Re:Twilio Confirms Data Breach After Hackers Leak 33M Authy ... by AnthonyMouse on Thursday July 04, 2024 @09:31PM (#40879285)

All the more reason to have the IETF do it and leave AT&T out of it.

Any modern system is going to use IP as a transport. Even the traditional phone network is VoIP under the hood in modern networks. The replacement system should be kept as far from the influence of the last mile providers as possible.

The thing that definitely shouldn't happen is that you get your phone number from them. Let it be "user@host" like email or otherwise assigned via DNS.

[ Parent | on HN ]