[liberationtech] Receiving phone verification and 2-Step Verification codes through a 'number inside Iran'

[Amin Sabeti]

Google has sent its codes via SMS with Iranian number since 6 months ago.

On 16 January 2015 at 17:39, Collin Anderson <collin at averysmallbird.com>
wrote:

>
> On Fri, Jan 16, 2015 at 12:10 PM, elham gheytanchi <elhamucla at hotmail.com>
> wrote:
>
>> I think it means the codes are generated by the state agencies.
>>
>
> They are not, the international companies would contract with an SMS
> gateway to send codes. That SMS gateway should be a more or less a dumb
> pipe that transmits whatever it is sent by the provider. It so happens that
> now the pipe is closer to the user but the source stays the same. The SMS
> gateway and telecommunications companies can certainly surveil or modify
> the content (the latter wouldn't be useful for 2FA), but it should not
> generate the codes.
>
>
> --
> *Collin David Anderson*
> averysmallbird.com | @cda | Washington, D.C.
>
> --
> Liberationtech is public & archives are searchable on Google. Violations
> of list guidelines will get you moderated:
> https://mailman.stanford.edu/mailman/listinfo/liberationtech.
> Unsubscribe, change to digest, or change password by emailing moderator at
> companys at stanford.edu.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20150116/d2dc5472/attachment.html>