News for hackers. Stuff that matters.

A comment on SMS Vulnerability in Twitter, Facebook, and Venmo.

Re:SMS Vulnerability in Twitter, Facebook, and Venmo by adrianpike on Monday December 03, 2012 @01:02PM (#4866781)
You can spoof sender information even when you're running through a shortcode gateway, so short of requiring some sort of authentication on every transaction, there's no real way around this.

Just like email, you should never trust the remote identity.

[ Parent | on HN ]
Re:SMS Vulnerability in Twitter, Facebook, and Venmo by darklajid on Monday December 03, 2012 @04:22PM (#4867921)
That's really the gist of this.

I still (it's 2012!) can amaze/scare/shock people by sending mails as their so/dad/uncle/lover/boss. SMS is just the same and for just the same reasons it's 'okay' (the usual use case is beneficial: I might want to send mail and define the from header. I really might want to send a text message from a website that looks like it came from my mobile, and leads replies to end up on it).

Can we solve this at all?

[ Parent | on HN ]