Re: [DNG] 2FA via SIPP# to PC- HowTo? Under Devuan
On Friday 08 October 2021 at 13:31:08, ael via Dng wrote: > On Fri, Oct 08, 2021 at 09:28:08AM +1100, terryc wrote: > > Hello folks > > > > Since it is topical:2FA > > > > So any recommendations for software and cluebies? > > > > For 2FA, all I need is a text message receiver. Others may want the > > whole headset backend. Any clues/experience? > > In UK at least, some providers have an option to do 2FA using a > landline/SIP 'phone (with a PTSN gateway). Usually they sent a > automated voice message asking for a number displayed on a webpage > to be entered on the keypad. Others send the code directly via > an audio message instead of a text. No smartphone needed. > > Pressure the companies to do the same? In my opinion, all companies should (be able to) offer an alternative means of authentication, if only for reasons of disability / accessibility, where not all people are able to use a screen captcha / smartphone / telephone / etc. For example, in Germany, Deutsche Bank switched a few years ago from using One-Time Pad Transaction Authentication Numbers to presenting a QR-code style (it's different, but it's the same idea) image on the screen when you're performing a transaction, and you either need a smartphone with a camera and the DB app installed, to read the code and show you the numbers on the smartphone screen, which you then type into the web page you are doing the transaction on, or you do the same thing with a specialised device which you buy from DB for €15 instead of using the smartphone and app. Neither of these works effectively for a blind user, so there is an (almost totally un-advertised) alternative where they will send a text message instead (knowing that blind people can generally manage to receive and read a text message by one means or another). It's still not entirely ideal, but it is at least an alternative, but you have to really ask to find out that it even exists. Antony. -- "There is no reason for any individual to have a computer in their home." - Ken Olsen, President of Digital Equipment Corporation (DEC, later consumed by Compaq, later merged with HP) Please reply to the list; please *don't* CC me. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] 2FA via SIPP# to PC- HowTo? Under Devuan
On Fri, Oct 08, 2021 at 09:28:08AM +1100, terryc wrote: > Hello folks > > Since it is topical:2FA > > So any recommendations for software and cluebies? > > For 2FA, all I need is a text message receiver. Others may want the > whole headset backend. Any clues/experience? In UK at least, some providers have an option to do 2FA using a landline/SIP 'phone (with a PTSN gateway). Usually they sent a automated voice message asking for a number displayed on a webpage to be entered on the keypad. Others send the code directly via an audio message instead of a text. No smartphone needed. Pressure the companies to do the same? ael ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] 2FA via SIPP# to PC- HowTo? Under Devuan
On Friday 08 October 2021 at 00:28:08, terryc wrote: > Hello folks > > Since it is topical:2FA > > TL:DR how to do it? > So any recommendations for software and cluebies? > > For 2FA, all I need is a text message receiver. Others may want the > whole headset backend. Any clues/experience? I doubt that as a small-scale user there is any economic way of getting SMS in or out over TCP/IP. I do this for a customer of mine with thousands of mobile numbers, but they have an SMPP gateway to a service provider, which you just can't get for a single number. However, at home I have set up the following: Raspberry Pi with a USB 3G dongle (eg: Huawei E160E) containing a SIM card, with the Debian / Devuan / Raspbian package "smstools" installed on the Pi. A bash script which smstools calls whenever a text message arrives, which both sends an email with the SMS content in the body, and if the SMS is from a select list of senders, reads out the content using the festival text-to- speech facility. That way, when a text arrives from Deutsche Bank, for example, to confirm a transaction, the loudspeakers read out the 6-digit code and it can be entered into the transaction form I'm in the process of completing. I hope that gives you some clues / ideas / inspiration :) Antony. -- A good conversation is like a miniskirt; short enought to retain interest, but long enough to cover the subject. - Celeste Headlee Please reply to the list; please *don't* CC me. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] 2FA via SIPP# to PC- HowTo? Under Devuan
Hello folks Since it is topical:2FA TL:DR how to do it? Unfortunately a number of services now ofer and some require 2FA. Having no love for the tracking built into the microcomputer known as a smartphone, I'm wondering how hard it is to do 2FA via my PC under Devuan? For us here, services are all via TCP/IP via a fibre cable(we were one of the lucky pockets to ge that here. So, now everything comes with TCP/IP. That includes all your can eat(suppssedly) 'data' with a bandwidth limited by size of the pipe you pay for. Since the old copper line is now a TCP/IP SIPP services to a SIPP phone on the LAN. I can/have paid for additional SIPP services/numbers from the same provider. These essentially do not take messages(SMS's). I know SIPP can be terminated on a PC, but I've never had a use to bother testing it. A SIPP service is also a expensive data stream here. So any recommendations for software and cluebies? For 2FA, all I need is a text message receiver. Others may want the whole headset backend. Any clues/experience? ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng