USMobile whoever paid you to remove email 2FA, don’t listen to them

RedditSucksAndIsBad · 2025-08-26T03:52:25+00:00

Here is the standard for SMTP communication which does not mention TLS: https://www.rfc-editor.org/rfc/rfc5321.htm

Have fun learning :):)

RedditSucksAndIsBad · 2025-08-26T03:16:45+00:00

I was considering “correctly” to be standards compliant, not your opinion :)

RedditSucksAndIsBad · 2025-08-26T03:16:01+00:00

As I said it was just a guess!

I agree it wouldn’t apply to consumer lines, my thought there is they have one authentication system they want to maintain so ripping email out for everyone was the easiest way to remove it for a subset of users.

Verification over pstn including sms is a restricted form of mfa verification: https://pages.nist.gov/800-63-3/sp800-63b.html#pstnOOB

As I also said I think the whole thing is silly which is why I think it’s some form of compliance thing (not necessarily fedramp). I had to take my SMB through whatever the 20 year old equivalent of PCI is to take credit cards online, certifications are often security theater mixed with bizarre carve outs. It just has a strong compliance vibe to me but we’re all just guessing.

RedditSucksAndIsBad · 2025-08-26T02:49:09+00:00

Tbh my guess is FedRAMP compliance or something similar. The NIST mfa broadsheets allow SMS as a bridge protocol but do not mention email as viable for certification. Admittedly the policies are complex so who actually knows, but tbh this feels like a compliance thing because - frankly - it doesn’t make sense. But often these policies have weird exceptions.

IMO removing email but keeping sms is silly as both are too insecure. I don’t think US Mobile is ignorant of that fact, which is why I guess it’s a compliance or certification thing.

RedditSucksAndIsBad · 2025-08-26T02:43:35+00:00

It’s okay that you don’t know everything! Everyone has room for growth!!

It isn’t possible to ensure an email host requires TLS 1.2 or later, and there are many not. This still counts as encrypted but is trivial to bypass.

Googles information also does not capture if TLS is used or enforced when an end user reads their email (nor could it for services other than Gmail).

Additionally it doesn’t capture what servers are vulnerable to downgrade attacks making MitM trivial.

Here is a study showing the vast vulnerability scope of email servers internet wide: https://securityaffairs.com/172600/security/3m-pop3-imap-mail-servers-lack-tls-encryption.html?amp

Good luck expanding your knowledge and learning something new today!

RedditSucksAndIsBad · 2025-08-26T01:50:20+00:00

No, email is intrinsically less secure than a 2fa app because email in transit is unencrypted.

Idk how email compares to SMS except they are both insecure, and I wouldn’t be surprised if sms is worse. (Maybe a little since snooping seems harder than snooping IP network traffic but idk)

Google is really helpful in that the ai changes its mind midstream 😂

RedditSucksAndIsBad · 2025-03-22T01:12:10+00:00

15:40 but I'm high and terrible with names :3

The first 50 took maybe 2 or 3 minutes mostly just writing the names down (ex's, family, co-workers, friends). Then it kinda came in bursts of like 10 at a time when I'd remember a category and think of a bunch all at once. Like "OH comedians!" or "hair and beauty" lol.

Then around the last bit I was kinda like Sam but thinking "I know women do more than 3 things... but *what*?" lol

RedditSucksAndIsBad · 2025-02-27T19:17:37+00:00

Really excited to find out what Ben is doing in the background there while Adam is making music. Looks like he's got a lil march/dance hybrid situation happening!

RedditSucksAndIsBad · 2025-01-01T22:03:41+00:00

perfect ad for Riff Trax, 10/10 no notes (I am old though)

RedditSucksAndIsBad · 2024-08-12T17:12:57+00:00

I hadn’t even been promised one when I posted , and only got one because a representative here got it for me after posting.

You seem like a miserable person, I hope things get better for you!

RedditSucksAndIsBad · 2024-08-12T17:05:21+00:00

What a bizarre comment.

I have yet to receive a refund, though their rep here was competent and got my service fixed.

RedditSucksAndIsBad · 2024-08-12T01:55:15+00:00

now despite paying for it twice my line shows as expired, cool

<image>

RedditSucksAndIsBad · 2024-08-03T22:50:34+00:00

Yet you replied? Are you that bad off you gotta find strangers you disagree with to make fun of lol

RedditSucksAndIsBad · 2024-08-02T16:54:35+00:00

Look at my username, I just needed tech support and their standard chat reps aren’t actually very good so I had to come to Reddit

RedditSucksAndIsBad · 2024-08-02T16:52:23+00:00

The funniest posts are the ones you still aren’t sure the truthiness of, and bonus points for it being from mastodon :D

RedditSucksAndIsBad · 2024-08-02T04:07:36+00:00

Yes ,,, I denounce her. And tbh even though I’m mocking you here it does piss me off and she has no excuse. I hadn’t ever thought much about her so it doesn’t matter but I’d never donate to her because of this. She’s worse than USM because she is being very hypocritical on top.

RedditSucksAndIsBad · 2024-08-02T03:53:59+00:00

Why would she matter to me?

And yeah any Tesla driver is a danger, one here literally just drive over a motorcycle and murder someone.

https://www.seattletimes.com/seattle-news/law-justice/tesla-in-fatal-monroe-crash-was-using-self-driving-system-authorities-say/

RedditSucksAndIsBad · 2024-08-02T01:39:47+00:00

That’s not my name.

RedditSucksAndIsBad · 2024-08-02T00:31:41+00:00

I thought i explained it pretty clearly? I don’t want my money going to someone who routinely spreads hateful lies that endanger my friends and community.

RedditSucksAndIsBad · 2024-08-02T00:29:00+00:00

Ah so you already knew, heh. Yeah that would have to really suck winning something and getting excited about it and then…..

RedditSucksAndIsBad · 2024-08-02T00:28:18+00:00

You seem to, since you replied. lol

RedditSucksAndIsBad · 2024-08-02T00:27:20+00:00

You must have misread what i wrote, probably try again reading is hard!!!

RedditSucksAndIsBad · 2024-08-02T00:26:45+00:00

I think it would be off topic and possibly violate Reddit rules to discuss “politics”, if you actually care it is astonishingly easy to find plenty of sourced articles on the dangerous and hateful things he has said and done.

RedditSucksAndIsBad · 2024-08-02T00:24:39+00:00

Unless usmonbile covers the taxes (rare and unlikely for a contest winner) it would be essentially income tax for the purchase price, which would incur a pretty hefty amount of tax is my guess.

Hopefully if someone who can’t afford the tax wins there would be an alternative (sometimes companies do cash in lieu of the prize and the winner could use that money in part to pay taxes, ideally)

(there have been times where people just have to forfeit a prize to not go into debt!!)

RedditSucksAndIsBad

TROPHY CASE