On Fri, Jan 16, 2015 at 12:10 PM, elham gheytanchi <elhamu...@hotmail.com>
wrote:

> I think it means the codes are generated by the state agencies.
>

They are not, the international companies would contract with an SMS
gateway to send codes. That SMS gateway should be a more or less a dumb
pipe that transmits whatever it is sent by the provider. It so happens that
now the pipe is closer to the user but the source stays the same. The SMS
gateway and telecommunications companies can certainly surveil or modify
the content (the latter wouldn't be useful for 2FA), but it should not
generate the codes.


-- 
*Collin David Anderson*
averysmallbird.com | @cda | Washington, D.C.
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Reply via email to