[liberationtech] Receiving phone verification and 2-Step Verification codes through a 'number inside Iran'

[Collin Anderson]

On Fri, Jan 16, 2015 at 12:10 PM, elham gheytanchi <elhamucla at hotmail.com>
wrote:

> I think it means the codes are generated by the state agencies.
>

They are not, the international companies would contract with an SMS
gateway to send codes. That SMS gateway should be a more or less a dumb
pipe that transmits whatever it is sent by the provider. It so happens that
now the pipe is closer to the user but the source stays the same. The SMS
gateway and telecommunications companies can certainly surveil or modify
the content (the latter wouldn't be useful for 2FA), but it should not
generate the codes.


-- 
*Collin David Anderson*
averysmallbird.com | @cda | Washington, D.C.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20150116/c3824efd/attachment.html>