nanog mailing list archives
Letters of Authorization still aren't worth the paper they aren't printed
From: Sean Donelan <sean () donelan com>
Date: Mon, 15 Mar 2021 13:46:02 -0400 (EDT)
Its amazing the telecommunications industry still uses or relies on "Letter of Authorization". Its less secure than faxing a piece of paper on "letterhead."
I've said this before, check the archives. https://www.vice.com/en/article/y3g8wb/hacker-got-my-texts-16-dollars-sakari-netnumberWhile adding a number, Sakari provides the Letter of Authorization for the user to sign. Sakari's LOA says that the user should not conduct any unlawful, harassing, or inappropriate behaviour with the text messaging service and phone number.
But as Lucky225 showed, a user can just sign up with someone else's number and receive their text messages instead.
Current thread:
- Letters of Authorization still aren't worth the paper they aren't printed Sean Donelan (Mar 15)
- Re: Letters of Authorization still aren't worth the paper they aren't printed Nick Hilliard (Mar 15)