4 ms·
Did anybody experiment using Twillio (or similar) to receive 2FA SMS? There are a few service that I use that mandate or only provide SMS as a 2FA. Using Twill
by zimbatm 6y ago
Did anybody experiment using Twillio (or similar) to receive 2FA SMS?
There are a few service that I use that mandate or only provide SMS as a 2FA. Using Twillio seems rather ideal since they have stricter control to porting numbers. The message probably is harder to intercept as well since it goes to their servers directly. And finally the phone number is harder for an attacker to find out since it's not my day-to-day number.
- Jenk 6y agoA few of my employers use(d) Twilio for 2FA SMS, one of whom are UK FCA regulated.
- Nextgrid 6y agoA lot of services reject numbers from known VoIP providers as a way to reject fraud (and I guess prevent people from defeating number-based marketing/advertising tracking by using unique numbers?). You can work around that by using lesser-known providers. In the UK, Andrews & Arnold (https://www.aa.net.uk https://www.aa.net.uk) provide UK mobile numbers which don't seem to be rejected by anything.
- closeparen 6y agoIt’s about making bans for fraud and abuse more expensive to repeatedly evade. The expected value of a few extra spam messages is lower than the cost of a new number.
- 4lun 6y agoI tried this for a bit, but it turned out a number of services (Google, Facebook) would fail (silently) when sending an SMS to Twilio numbers. It might no longer be true as there was a Twilio support page that confirmed this behaviour but is now just a 404[0] (though you can see a mention of it on StackOverflow[1]) [0] https://support.twilio.com/hc/en-us/articles/223134367-Sending-messages-from-Facebook-and-other-services-to-Twilio https://support.twilio.com/hc/en-us/articles/223134367-Sendi... [1] https://stackoverflow.com/a/55852784 https://stackoverflow.com/a/55852784