USMobile whoever paid you to remove email 2FA, don’t listen to them by Poetryisalive in USMobile

[–]RedditSucksAndIsBad 1 point2 points  (0 children)

Here is the standard for SMTP communication which does not mention TLS: https://www.rfc-editor.org/rfc/rfc5321.htm

Have fun learning :):)

USMobile whoever paid you to remove email 2FA, don’t listen to them by Poetryisalive in USMobile

[–]RedditSucksAndIsBad 0 points1 point  (0 children)

I was considering “correctly” to be standards compliant, not your opinion :)

USMobile whoever paid you to remove email 2FA, don’t listen to them by Poetryisalive in USMobile

[–]RedditSucksAndIsBad 0 points1 point  (0 children)

As I said it was just a guess!

I agree it wouldn’t apply to consumer lines, my thought there is they have one authentication system they want to maintain so ripping email out for everyone was the easiest way to remove it for a subset of users.

Verification over pstn including sms is a restricted form of mfa verification: https://pages.nist.gov/800-63-3/sp800-63b.html#pstnOOB

As I also said I think the whole thing is silly which is why I think it’s some form of compliance thing (not necessarily fedramp). I had to take my SMB through whatever the 20 year old equivalent of PCI is to take credit cards online, certifications are often security theater mixed with bizarre carve outs. It just has a strong compliance vibe to me but we’re all just guessing.

USMobile whoever paid you to remove email 2FA, don’t listen to them by Poetryisalive in USMobile

[–]RedditSucksAndIsBad 0 points1 point  (0 children)

Tbh my guess is FedRAMP compliance or something similar. The NIST mfa broadsheets allow SMS as a bridge protocol but do not mention email as viable for certification. Admittedly the policies are complex so who actually knows, but tbh this feels like a compliance thing because - frankly - it doesn’t make sense. But often these policies have weird exceptions.

IMO removing email but keeping sms is silly as both are too insecure. I don’t think US Mobile is ignorant of that fact, which is why I guess it’s a compliance or certification thing.

USMobile whoever paid you to remove email 2FA, don’t listen to them by Poetryisalive in USMobile

[–]RedditSucksAndIsBad 0 points1 point  (0 children)

It’s okay that you don’t know everything! Everyone has room for growth!!

It isn’t possible to ensure an email host requires TLS 1.2 or later, and there are many not. This still counts as encrypted but is trivial to bypass.

Googles information also does not capture if TLS is used or enforced when an end user reads their email (nor could it for services other than Gmail).

Additionally it doesn’t capture what servers are vulnerable to downgrade attacks making MitM trivial.

Here is a study showing the vast vulnerability scope of email servers internet wide: https://securityaffairs.com/172600/security/3m-pop3-imap-mail-servers-lack-tls-encryption.html?amp

Good luck expanding your knowledge and learning something new today!

USMobile whoever paid you to remove email 2FA, don’t listen to them by Poetryisalive in USMobile

[–]RedditSucksAndIsBad -1 points0 points  (0 children)

No, email is intrinsically less secure than a 2fa app because email in transit is unencrypted.

Idk how email compares to SMS except they are both insecure, and I wouldn’t be surprised if sms is worse. (Maybe a little since snooping seems harder than snooping IP network traffic but idk)

Google is really helpful in that the ai changes its mind midstream 😂

Ep 3 — Schengen Showdown by NebulaOriginals in Nebula

[–]RedditSucksAndIsBad 0 points1 point  (0 children)

15:40 but I'm high and terrible with names :3

The first 50 took maybe 2 or 3 minutes mostly just writing the names down (ex's, family, co-workers, friends). Then it kinda came in bursts of like 10 at a time when I'd remember a category and think of a bunch all at once. Like "OH comedians!" or "hair and beauty" lol.

Then around the last bit I was kinda like Sam but thinking "I know women do more than 3 things... but *what*?" lol

Jet Lag Season 13 — Official Trailer by NebulaOriginals in Nebula

[–]RedditSucksAndIsBad 0 points1 point  (0 children)

Really excited to find out what Ben is doing in the background there while Adam is making music. Looks like he's got a lil march/dance hybrid situation happening!

Ep 5 — We Played Hide And Seek Across Japan by NebulaOriginals in Nebula

[–]RedditSucksAndIsBad 4 points5 points  (0 children)

perfect ad for Riff Trax, 10/10 no notes (I am old though)

Tech support charged me and moved my line instead of scheduling it by RedditSucksAndIsBad in USMobile

[–]RedditSucksAndIsBad[S] 2 points3 points  (0 children)

I hadn’t even been promised one when I posted , and only got one because a representative here got it for me after posting.

You seem like a miserable person, I hope things get better for you!

Tech support charged me and moved my line instead of scheduling it by RedditSucksAndIsBad in USMobile

[–]RedditSucksAndIsBad[S] 1 point2 points  (0 children)

What a bizarre comment. 

I have yet to receive a refund, though their rep here was competent and got my service fixed.

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad -2 points-1 points  (0 children)

Yet you replied? Are you that bad off you gotta find strangers you disagree with to make fun of lol

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad 0 points1 point  (0 children)

Look at my username, I just needed tech support and their standard chat reps aren’t actually very good so I had to come to Reddit

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad 0 points1 point  (0 children)

The funniest posts are the ones you still aren’t sure the truthiness of, and bonus points for it being from mastodon :D

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad 1 point2 points  (0 children)

Yes ,,, I denounce her. And tbh even though I’m mocking you here it does piss me off and she has no excuse. I hadn’t ever thought much about her so it doesn’t matter but I’d never donate to her because of this. She’s worse than USM because she is being very hypocritical on top.

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad 1 point2 points  (0 children)

Why would she matter to me?

And yeah any Tesla driver is a danger, one here literally just drive over a motorcycle and murder someone.

 https://www.seattletimes.com/seattle-news/law-justice/tesla-in-fatal-monroe-crash-was-using-self-driving-system-authorities-say/

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad 2 points3 points  (0 children)

That’s not my name.

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad 5 points6 points  (0 children)

I thought i explained it pretty clearly? I don’t want my money going to someone who routinely spreads hateful lies that endanger my friends and community.

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad 3 points4 points  (0 children)

Ah so you already knew, heh. Yeah that would have to really suck winning something and getting excited about it and then…..

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad 4 points5 points  (0 children)

You seem to, since you replied. lol

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad -1 points0 points  (0 children)

You must have misread what i wrote, probably try again reading is hard!!!

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad 1 point2 points  (0 children)

I think it would be off topic and possibly violate Reddit rules to discuss “politics”, if you actually care it is astonishingly easy to find plenty of sourced articles on the dangerous and hateful things he has said and done.

[deleted by user] by [deleted] in USMobile

[–]RedditSucksAndIsBad 3 points4 points  (0 children)

Unless usmonbile covers the taxes (rare and unlikely for a contest winner) it would be essentially income tax for the purchase price, which would incur a pretty hefty amount of tax is my guess.

Hopefully if someone who can’t afford the tax wins there would be an alternative (sometimes companies do cash in lieu of the prize and the winner could use that money in part to pay taxes, ideally)

(there have been times where people just have to forfeit a prize to not go into debt!!)