Search Mailing List Archives

Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

[liberationtech] Receiving phone verification and 2-Step Verification codes through a 'number inside Iran'

Collin Anderson collin at
Fri Jan 16 09:39:55 PST 2015

On Fri, Jan 16, 2015 at 12:10 PM, elham gheytanchi <elhamucla at>

> I think it means the codes are generated by the state agencies.

They are not, the international companies would contract with an SMS
gateway to send codes. That SMS gateway should be a more or less a dumb
pipe that transmits whatever it is sent by the provider. It so happens that
now the pipe is closer to the user but the source stays the same. The SMS
gateway and telecommunications companies can certainly surveil or modify
the content (the latter wouldn't be useful for 2FA), but it should not
generate the codes.

*Collin David Anderson* | @cda | Washington, D.C.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the liberationtech mailing list