Vibed account verification.

[terryhancock@realsocial.life]

@anderseknert
Obligatory...

[unchartedworlds@scicomm.xyz]

@anderseknert

Uh oh...

[khleedril@cyberplace.social]

@anderseknert Where's the link that says, 'I didn't receive the code, please send it again?'

[jes@labyrinth.zone]

@anderseknert also another thing, if you know where someone generally lives, like state or zip, you could reverse the first 6 digits of the phone number.
so really you also gave someone ammunition for a sim swapping attack, all they need to do is dial all the general area digits until they come across you, then they have enough information to have your phone number.

[eliasr@social.librem.one]

@anderseknert to be fair, it really is much more convenient this way!

[lukefromdc@kolektiva.social]

@anderseknert smells like old rotting phish to me

[njwookie@mindly.social]

@anderseknert

DOH!

[lauerhahn@sfba.social]

@anderseknert twist: the correct code is 'below2'.

[seconduniverse@autistics.life]

@anderseknert to be fair, that is much more convenient!

[raepatterson@mastodon.social]

@dryak @anderseknert

Obligatory xkcd

[eestileib@tech.lgbt]

@anderseknert

(1 + ε)FA

[inkomtech@infosec.exchange]

@TerryHancock @anderseknert

Cheetotine.

[starkrg@myside-yourside.net]

@anderseknert Here's your verification code, we also sent it to some random phone number for the lols.

[ddgulledge@social.linux.pizza]

@anderseknert Don't worry. Everyone got that same code and even if they hadn't, any code will work to access the single account that contains everyone's data.

[awesomesheep48@gts.awesomesheep48.ca]

@anderseknert I stared at this for far to long before realizing what the issue was…