• SMS verification code from Yahoo Mail

    From Mr. Man-wai Chang@toylet.toylet@gmail.com to alt.comp.software.firefox on Fri Aug 8 16:16:21 2025
    From Newsgroup: alt.comp.software.firefox


    Can you receive SMS verification code from Yahoo Mail?

    I could not receive any SMS 2FA messages when logging in Yahoo Mail from
    Hong Kong. And I dunno how to report it to Yahoo, without paying money.
    --
    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Lawrence D'Oliveiro@ldo@nz.invalid to alt.comp.software.firefox on Fri Aug 8 08:52:27 2025
    From Newsgroup: alt.comp.software.firefox

    On Fri, 8 Aug 2025 16:16:21 +0800, Mr. Man-wai Chang wrote:

    Can you receive SMS verification code from Yahoo Mail?

    SMS verification codes are not considered a good form of second
    authentication factor.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mr. Man-wai Chang@toylet.toylet@gmail.com to alt.comp.software.firefox on Fri Aug 8 17:45:37 2025
    From Newsgroup: alt.comp.software.firefox

    On 8/8/2025 4:52 pm, Lawrence D'Oliveiro wrote:
    On Fri, 8 Aug 2025 16:16:21 +0800, Mr. Man-wai Chang wrote:

    Can you receive SMS verification code from Yahoo Mail?

    SMS verification codes are not considered a good form of second authentication factor.

    Well, I am NOT firing a nuclear missile. Simple SMS is okay for this
    kind of application.

    Rolling back time 20 or even 30 years, Hotmail and Yahoo Mail did NOT
    even have 2FA. :)
    --
    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw

    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From VanguardLH@V@nguard.LH to alt.comp.software.firefox on Fri Aug 8 10:22:11 2025
    From Newsgroup: alt.comp.software.firefox

    "Mr. Man-wai Chang" <toylet.toylet@gmail.com> wrote:

    Can you receive SMS verification code from Yahoo Mail?

    I could not receive any SMS 2FA messages when logging in Yahoo Mail from Hong Kong. And I dunno how to report it to Yahoo, without paying money.

    Did this work before, or never worked?

    You sure your phone number is correct in your Yahoo account, and it
    points to a mobile phone (for SMS support)?

    If you manage to get into your Yahoo account, maybe you want its 2FA
    scheme to call you instead of send a SMS messge aka text. Or disable
    2FA altogether.

    https://help.yahoo.com/kb/SLN5013.html

    Did the login page telling you about sending a security code give you an
    option to send the code using an alternate method? If you defined a
    recovery e-mail address in your Yahoo account, try resending the code
    using e-mail.

    https://help.yahoo.com/kb/add-remove-recovery-method-sln2058.html

    I have had several sites that use 2FA to, ahem, "secure" a login (see
    below), but they never did send a text. Sometimes I had to get the text
    sent again with the code. Sometimes I had to elect an alternate method
    (i.e., e-mail) to get the code.

    Does your cellular carrier provide a web interface to your account, so
    you could check for texts using that instead of your phone?


    Aside

    By the way, it is a lie that sending 2FA codes via SMS or e-mail
    increases the security of your logins. Neither SMS nor e-mail are
    secure communication venues. Neither method employs encryption. Also,
    neither SMS nor e-mail have guaranteed delivery. Yeah, let's secure a
    login using insecure venues. (roll eyes)

    https://www.isdecisions.com/en/blog/mfa/why-sms-authentication-2fa-not-secure https://www.vectra.ai/blog/the-hidden-risks-of-sms-based-multi-factor-authentication

    But you won't convince sites using 2FA that it doesn't secure a login.
    They stupidly assume everyone has a [mobile] phone with SMS capability.
    I have Google Voice send a copy of texts to me via e-mail, so I don't
    need a phone to complete a login when at my desktop PC.

    All to overcome lazy and ignorant users that reuse the same password at
    every account where they login instead of long and strong passwords that
    are unique to every domain.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Adam H. Kerman@ahk@chinet.com to alt.comp.software.firefox on Fri Aug 8 15:27:28 2025
    From Newsgroup: alt.comp.software.firefox

    VanguardLH <V@nguard.LH> wrote:
    Mr. Man-wai Chang <toylet.toylet@gmail.com> wrote:

    Can you receive SMS verification code from Yahoo Mail?

    I could not receive any SMS 2FA messages when logging in Yahoo Mail from >>Hong Kong. And I dunno how to report it to Yahoo, without paying money.

    Did this work before, or never worked?

    You sure your phone number is correct in your Yahoo account, and it
    points to a mobile phone (for SMS support)?

    If it's not correct, how the hell is he supposed to log in to change it?

    Did the login page telling you about sending a security code give you an >option to send the code using an alternate method? If you defined a
    recovery e-mail address in your Yahoo account, try resending the code
    using e-mail.

    https://help.yahoo.com/kb/add-remove-recovery-method-sln2058.html

    If I give Yahoo too much identifying information, how the hell has that increased my security?

    . . .
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mr. Man-wai Chang@toylet.toylet@gmail.com to alt.comp.software.firefox on Fri Aug 8 23:32:55 2025
    From Newsgroup: alt.comp.software.firefox

    On 8/8/2025 11:22 pm, VanguardLH wrote:
    "Mr. Man-wai Chang" <toylet.toylet@gmail.com> wrote:

    Can you receive SMS verification code from Yahoo Mail?

    Did this work before, or never worked?

    You sure your phone number is correct in your Yahoo account, and it
    points to a mobile phone (for SMS support)?

    It always worked, until this month!! I dunno whether it got something to
    do with added support for WhatsApp. I got the same problem with Facebook actually, but it's now working aOk now.

    Google's SMS 2FA always work, and so far it does not use WhatsApp.
    --
    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw

    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mr. Man-wai Chang@toylet.toylet@gmail.com to alt.comp.software.firefox on Fri Aug 8 23:34:03 2025
    From Newsgroup: alt.comp.software.firefox

    On 8/8/2025 11:27 pm, Adam H. Kerman wrote:
    VanguardLH <V@nguard.LH> wrote:
    Mr. Man-wai Chang <toylet.toylet@gmail.com> wrote:


    If it's not correct, how the hell is he supposed to log in to change it?

    Yahoo Mail allows sending 2FA code to verified email account.
    --
    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw

    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Adam H. Kerman@ahk@chinet.com to alt.comp.software.firefox on Fri Aug 8 17:15:02 2025
    From Newsgroup: alt.comp.software.firefox

    Mr. Man-wai Chang <toylet.toylet@gmail.com> wrote:
    On 8/8/2025 11:27 pm, Adam H. Kerman wrote:

    If it's not correct, how the hell is he supposed to log in to change it?

    Yahoo Mail allows sending 2FA code to verified email account.

    Gah. I try to avoid giving services extra identifying information.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From VanguardLH@V@nguard.LH to alt.comp.software.firefox on Fri Aug 8 12:34:34 2025
    From Newsgroup: alt.comp.software.firefox

    "Adam H. Kerman" <ahk@chinet.com> wrote:

    VanguardLH <V@nguard.LH> wrote:

    Mr. Man-wai Chang <toylet.toylet@gmail.com> wrote:

    Can you receive SMS verification code from Yahoo Mail?
    I could not receive any SMS 2FA messages when logging in Yahoo Mail
    from Hong Kong. And I dunno how to report it to Yahoo, without
    paying money.

    You sure your phone number is correct in your Yahoo account, and it
    points to a mobile phone (for SMS support)?

    If it's not correct, how the hell is he supposed to log in to change it?

    The part you snipped: "If you manage to get into your Yahoo account".

    Instead of sending the code via SMS, often an alternate method is
    available, like via e-mail. If you are attempting recovery of an
    account then you cannot use that account to recovery itself.

    Or he could try the "Forgot password" process.

    Did the login page telling you about sending a security code give you
    an option to send the code using an alternate method? If you
    defined a recovery e-mail address in your Yahoo account, try
    resending the code using e-mail.

    https://help.yahoo.com/kb/add-remove-recovery-method-sln2058.html

    If I give Yahoo too much identifying information, how the hell has
    that increased my security?

    Hmm, you've never had your account locked or suspended, or some stupid
    regional block where you need to use a recovery account to get into the
    target account. Obviously you cannot use the same account for recovery.

    You can choose not to provide a recovery e-mail address, but then you
    also realize that you have no means to recover the account, so it must
    not be an important account.

    And to my side issue: How has using 2FA in any form (via SMS or e-mail) increased your security? It doesn't. It just makes users jump though
    hoops thinking security is improved.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mike Easter@MikeE@ster.invalid to alt.comp.software.firefox on Fri Aug 8 10:48:56 2025
    From Newsgroup: alt.comp.software.firefox

    VanguardLH wrote:
    And to my side issue: How has using 2FA in any form (via SMS or e-mail) increased your security? It doesn't. It just makes users jump though
    hoops thinking security is improved.

    I am NOT a fan of more hoops; I think the *option* should rest w/ the *user*/client not the server/merchant; but it would seem to add a
    'layer' of security, which layering has always been presumed 'more secure'.

    I don't know exactly how one should 'anticipate' his account to become compromised, but I'm pretty sure it happens w/ significant frequency.

    Why/How can/do YOU say that 2/multi/FA does NOT add security?
    --
    Mike Easter
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mike Easter@MikeE@ster.invalid to alt.comp.software.firefox on Fri Aug 8 10:52:06 2025
    From Newsgroup: alt.comp.software.firefox

    Mike Easter wrote:
    Why/How can/do YOU say that 2/multi/FA does NOT add security?

    https://arxiv.org/abs/2305.00945
    Our findings reveal that MFA implementation offers outstanding
    protection, with over 99.99% of MFA-enabled accounts remaining
    secure during the investigation period. Moreover, MFA reduces the
    risk of compromise by 99.22% across the entire population and by
    98.56% in cases of leaked credentials.
    --
    Mike Easter
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mike Easter@MikeE@ster.invalid to alt.comp.software.firefox on Fri Aug 8 11:01:29 2025
    From Newsgroup: alt.comp.software.firefox

    VanguardLH wrote:
    You can choose not to provide a recovery e-mail address, but then you
    also realize that you have no means to recover the account, so it must
    not be an important account.

    Personally I have never encountered an 'impossible' loss of access to an account, but I have tried to help a relative recover access to his Apple account, which 'lack of prior preparation' rendered the project
    *impossible* so I strongly agree that one should have a workable plan to recover an account if 'something goes wrong'.

    Also the article I cited previously does NOT rank SMS as high as
    alternate authentications.
    --
    Mike Easter
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Adam H. Kerman@ahk@chinet.com to alt.comp.software.firefox on Fri Aug 8 18:09:49 2025
    From Newsgroup: alt.comp.software.firefox

    VanguardLH <V@nguard.LH> wrote:
    Adam H. Kerman <ahk@chinet.com> wrote:
    VanguardLH <V@nguard.LH> wrote:
    Mr. Man-wai Chang <toylet.toylet@gmail.com> wrote:

    . . .

    If I give Yahoo too much identifying information, how the hell has
    that increased my security?

    Hmm, you've never had your account locked or suspended, or some stupid >regional block where you need to use a recovery account to get into the >target account. Obviously you cannot use the same account for recovery.

    Yahoo? No. When Yahoo provided a lot more service, I used to have a number
    of accoumts to maintain directory listings, but once Yahoo got rid of
    their traditional controlled-vocabulary Web index and directory and sold
    off Flickr, I closed all but one account. I have one remaining account
    I use to send out a monthly program announcement for one organization to various mailing lists.

    ebay treats me like shit, giving me all sorts of grief the last time I
    tried to make a book purchase that my activity was harmful to the platform. I've never conducted a sale through ebay.

    And of coure Comcast tries to force me to add all sorts of identifying information to the account and then refuses to accept it.

    With endless notifications that "We allowed every bit of personal
    information about you to be compromised by Chinese and Russian hackers,"
    no Vanguard, I am quite reluctant to give identifying information to
    platforms for account recovery purposes. It's an amazingly bad idea.

    You can choose not to provide a recovery e-mail address, but then you
    also realize that you have no means to recover the account, so it must
    not be an important account.

    If it's an important account, I choose not to give further identifying information too.

    And to my side issue: How has using 2FA in any form (via SMS or e-mail) >increased your security? It doesn't. It just makes users jump though
    hoops thinking security is improved.

    Well yeah, except I never believed security has been improved any more
    than I believe that paperless billing saves the environment or that
    plastic recycling keeps plastic out of landfills.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Adam H. Kerman@ahk@chinet.com to alt.comp.software.firefox on Fri Aug 8 18:13:51 2025
    From Newsgroup: alt.comp.software.firefox

    Mike Easter <MikeE@ster.invalid> wrote:
    VanguardLH wrote:

    And to my side issue: How has using 2FA in any form (via SMS or e-mail) >>increased your security? It doesn't. It just makes users jump though >>hoops thinking security is improved.

    I am NOT a fan of more hoops; I think the *option* should rest w/ the >*user*/client not the server/merchant; but it would seem to add a
    'layer' of security, which layering has always been presumed 'more secure'.

    I don't know exactly how one should 'anticipate' his account to become >compromised, but I'm pretty sure it happens w/ significant frequency.

    Why/How can/do YOU say that 2/multi/FA does NOT add security?

    The platform sending the email or text message has no ability to tell
    that the message wasn't intercepted before the customer received it at
    his device.

    I suppose one-time passcodes are safer, but those get sent by email
    message which, again, may have been compromised.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mike Easter@MikeE@ster.invalid to alt.comp.software.firefox on Fri Aug 8 11:33:52 2025
    From Newsgroup: alt.comp.software.firefox

    Adam H. Kerman wrote:
    The platform sending the email or text message has no ability to tell
    that the message wasn't intercepted before the customer received it at
    his device.

    I suppose one-time passcodes are safer, but those get sent by email
    message which, again, may have been compromised.

    Well, if the adversary/interloper has all of the same identity
    characteristics available to him as the legitimate user, then they are 'identical' to the merchant/server.
    --
    Mike Easter
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Adam H. Kerman@ahk@chinet.com to alt.comp.software.firefox on Fri Aug 8 18:47:43 2025
    From Newsgroup: alt.comp.software.firefox

    Mike Easter <MikeE@ster.invalid> wrote:
    Adam H. Kerman wrote:

    The platform sending the email or text message has no ability to tell
    that the message wasn't intercepted before the customer received it at
    his device.

    I suppose one-time passcodes are safer, but those get sent by email
    message which, again, may have been compromised.

    Well, if the adversary/interloper has all of the same identity >characteristics available to him as the legitimate user, then they are >'identical' to the merchant/server.

    Yup. We've made committing fraud involving identity theft super easy.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Lawrence D'Oliveiro@ldo@nz.invalid to alt.comp.software.firefox on Fri Aug 8 22:02:53 2025
    From Newsgroup: alt.comp.software.firefox

    On Fri, 8 Aug 2025 17:45:37 +0800, Mr. Man-wai Chang wrote:

    On 8/8/2025 4:52 pm, Lawrence D'Oliveiro wrote:

    On Fri, 8 Aug 2025 16:16:21 +0800, Mr. Man-wai Chang wrote:

    Can you receive SMS verification code from Yahoo Mail?

    SMS verification codes are not considered a good form of second
    authentication factor.

    Well, I am NOT firing a nuclear missile. Simple SMS is okay for this
    kind of application.

    Not sure why thatrCOs relevant, given that the Minuteman passcodes not
    didnrCOt use SMS, but they were set to the fixed value rCL00000000rCY <https://arstechnica.com/tech-policy/2013/12/launch-code-for-us-nukes-was-00000000-for-20-years/>.

    Rolling back time 20 or even 30 years, Hotmail and Yahoo Mail did NOT
    even have 2FA. :)

    And going back even further in time, earlier multiuser systems didnrCOt
    use encrypted passwords. ITS didnrCYt even use passwords at all.

    So tell us again, how is all this a good excuse for lax security on
    your part?
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mr. Man-wai Chang@toylet.toylet@gmail.com to alt.comp.software.firefox on Sat Aug 9 23:31:05 2025
    From Newsgroup: alt.comp.software.firefox

    On 9/8/2025 6:02 am, Lawrence D'Oliveiro wrote:

    And going back even further in time, earlier multiuser systems didnrCOt
    use encrypted passwords. ITS didnrCYt even use passwords at all.

    So tell us again, how is all this a good excuse for lax security on
    your part?

    If Yahoo Mail just failed to send me the 2FA code for whatever reasons
    AND if SMS was the only way to send 2FA codes, then I would be locked
    out of my account forever, until Yahoo Mail suddenly discovered and
    fixed the problem. So my only option would be to turn off 2FA, going
    back in time. :)

    I don't use WhatsApp. I dunno why Yahoo Mail suddenly got interested in sending 2FA codes using WhatsApp.
    --
    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Retirednoguilt@HapilyRetired@fakeaddress.com to alt.comp.software.firefox on Sat Aug 9 11:31:18 2025
    From Newsgroup: alt.comp.software.firefox

    On 8/8/2025 6:02 PM, Lawrence D'Oliveiro wrote:
    On Fri, 8 Aug 2025 17:45:37 +0800, Mr. Man-wai Chang wrote:

    On 8/8/2025 4:52 pm, Lawrence D'Oliveiro wrote:

    On Fri, 8 Aug 2025 16:16:21 +0800, Mr. Man-wai Chang wrote:

    Can you receive SMS verification code from Yahoo Mail?

    SMS verification codes are not considered a good form of second
    authentication factor.

    Well, I am NOT firing a nuclear missile. Simple SMS is okay for this
    kind of application.

    Not sure why thatrCOs relevant, given that the Minuteman passcodes not didnrCOt use SMS, but they were set to the fixed value rCL00000000rCY <https://arstechnica.com/tech-policy/2013/12/launch-code-for-us-nukes-was-00000000-for-20-years/>.

    Rolling back time 20 or even 30 years, Hotmail and Yahoo Mail did NOT
    even have 2FA. :)

    And going back even further in time, earlier multiuser systems didnrCOt
    use encrypted passwords. ITS didnrCYt even use passwords at all.

    So tell us again, how is all this a good excuse for lax security on
    your part?

    I've had the same Yahoo e-mail account for more than 12 years. Do not
    have 2FA implemented on it. I get maybe 1, but usually 0 spam
    emails/month. Go figure. I find their spam filtering to be among the
    best of the free e-mail account providers. I have the same experience
    with my gmail account; again no 2FA and essentially no spam.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mr. Man-wai Chang@toylet.toylet@gmail.com to alt.comp.software.firefox on Sat Aug 9 23:34:28 2025
    From Newsgroup: alt.comp.software.firefox

    On 9/8/2025 2:01 am, Mike Easter wrote:

    Personally I have never encountered an 'impossible' loss of access to an account, but I have tried to help a relative recover access to his Apple account, which 'lack of prior preparation' rendered the project
    *impossible* so I strongly agree that one should have a workable plan to recover an account if 'something goes wrong'.

    In this case, Apple had to offer a fool-proof recovery procedure to let
    your relative back in. The same goes to Yahoo Mail.

    I dunno why suddenly Yahoo Mail failed to send SMS to Hong Kong. Because
    of recent political issues? But Google is doing SMS fine. So I suspect WhatsApp.
    --
    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mr. Man-wai Chang@toylet.toylet@gmail.com to alt.comp.software.firefox on Sat Aug 9 23:36:35 2025
    From Newsgroup: alt.comp.software.firefox

    On 9/8/2025 2:09 am, Adam H. Kerman wrote:

    Well yeah, except I never believed security has been improved any more
    than I believe that paperless billing saves the environment or that
    plastic recycling keeps plastic out of landfills.

    TCP/IP is just a circuit. Everything can be captured for password
    analysis. That's why a time-based solution (like SMS) might help improve security a bit.
    --
    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mr. Man-wai Chang@toylet.toylet@gmail.com to alt.comp.software.firefox on Sat Aug 9 23:39:01 2025
    From Newsgroup: alt.comp.software.firefox

    On 9/8/2025 11:31 pm, Retirednoguilt wrote:

    I've had the same Yahoo e-mail account for more than 12 years. Do not
    have 2FA implemented on it. I get maybe 1, but usually 0 spam
    emails/month. Go figure. I find their spam filtering to be among the
    best of the free e-mail account providers. I have the same experience
    with my gmail account; again no 2FA and essentially no spam.

    Yahoo Mail's 2FA over email is working fine so far. But then 20-30 years
    ago, we didn't have 2FA. I didn't lose any web-mail accounts. Dunno if
    this was/is pure luck. It isn't difficult to steal passwords, right? :)
    --
    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From VanguardLH@V@nguard.LH to alt.comp.software.firefox on Sat Aug 9 13:57:51 2025
    From Newsgroup: alt.comp.software.firefox

    "Mr. Man-wai Chang" <toylet.toylet@gmail.com> wrote:

    If Yahoo Mail just failed to send me the 2FA code for whatever reasons
    AND if SMS was the only way to send 2FA codes, then I would be locked
    out of my account forever, until Yahoo Mail suddenly discovered and
    fixed the problem. So my only option would be to turn off 2FA, going
    back in time. :)

    I don't use WhatsApp. I dunno why Yahoo Mail suddenly got interested in sending 2FA codes using WhatsApp.

    Rather than setup their own SMS+auth servers, it can be cheaper to
    contract out that service to an outside service. Yahoo chose WhatsApp.
    Other choices are Twilio*, EZtexting, SimpleTexting, SlickText, etc.

    * WhatsApp uses Twilio for SMS services.
    https://www.twilio.com/en-us/messaging/channels/whatsapp
    Instead of a flat monthly fee, Twilio charges by volume: you pay for
    how much you use; i.e., their pay-as-you-go WhatsApp business API.

    You don't use (which probably means you do not have installed) WhatsApp,
    but maybe it could provide an alternate method to get the 2FA codes.

    Use WhatsApp to verify your Yahoo account https://help.yahoo.com/kb/SLN36543.html
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From VanguardLH@V@nguard.LH to alt.comp.software.firefox on Sat Aug 9 14:22:24 2025
    From Newsgroup: alt.comp.software.firefox

    "Mr. Man-wai Chang" <toylet.toylet@gmail.com> wrote:

    TCP/IP is just a circuit. Everything can be captured for password
    analysis. That's why a time-based solution (like SMS) might help
    improve security a bit. ^^^
    ---------------------------------------------------'
    '
    '--- Perhaps you meant TOTP (Time-based One-time Password).
    SMS is not secure with its plain-text messaging.

    https://en.wikipedia.org/wiki/Time-based_one-time_password

    You'd need an authenticator app on your end to do TOTP. Alas, the auth
    apps don't work with all TOTP setups, so you could end up with more than
    one such app to be compatible with multiple sites.

    I use Bitwarden to sync my passwords across multiple instances of
    different web browsers on different platforms, but it's the free version
    which does not include their TOTP support. I used to have Twilio's
    Authy (my bank wanted that one), but they discontinued (end of lifed)
    their extension back in Feb 2020 that I used in Firefox and Edge. I
    didn't need a standalone app since the only time I got nuisanced with
    2FA security theater was for logins at a web site, so I had their web
    browser extension to handle those frickin security codes. Their Windows
    and Android apps are free.

    MS and Google have their free auth apps, too. The Aegis app is also
    free. For those that want to give minimal info to an auth service, they
    might prefer 2FAS. Symantec has their VIP authenticator. I remember
    finding that one authenticator didn't work across all sites. Some sites
    don't seem to work with auth apps perhaps because they don't support
    TOTP.

    Comparison of OTP applications https://en.wikipedia.org/wiki/Comparison_of_OTP_applications

    And then are the solution involving hardware; e.g., Yubikey. But if the hardware gets broken, or is lost or stolen, you no longer have the
    hardware to complete a login. They are also not free ($30, and up).
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mr. Man-wai Chang@toylet.toylet@gmail.com to alt.comp.software.firefox on Sun Aug 10 11:41:52 2025
    From Newsgroup: alt.comp.software.firefox

    On 10/8/2025 2:57 am, VanguardLH wrote:

    Use WhatsApp to verify your Yahoo account https://help.yahoo.com/kb/SLN36543.html


    I rather turn off 2FA!! Maybe Meta wanna sell WhatsApp as a replacement
    for SMS.
    --
    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Mr. Man-wai Chang@toylet.toylet@gmail.com to alt.comp.software.firefox on Sun Aug 10 12:30:59 2025
    From Newsgroup: alt.comp.software.firefox

    On 8/8/2025 4:16 pm, Mr. Man-wai Chang wrote:

    Can you receive SMS verification code from Yahoo Mail?

    I could not receive any SMS 2FA messages when logging in Yahoo Mail from
    Hong Kong. And I dunno how to report it to Yahoo, without paying money.


    I have just tried the SMS 2FA screen again, no luck!!

    I noticed that the "Enter verification code" web-page of Yahoo Mail took
    a few seconds to finish loading, and it looked like client-side
    scripting. Maybe this was the problem....

    <https://login.yahoo.com/account/challenge/phone-verify?.intl=us&.lang=en-US&src=ym&activity=mail-direct&pspid=159600001&done=https%3A%2F%2Fmail.yahoo.com%2Fd&as=1&dc=%7B%26quot%3Bpa%26quot%3B%3A%7B%26quot%3Bstatus%26quot%3B%3Afalse%7D%2C%26quot%3BisWebAuthnSupported%26quot%3B%3Atrue%7D&acrumb=tcAdafaE&display=login&authMechanism=primary&sessionIndex=QQ-->
    --
    @~@ Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!
    / v \ May the Force and farces be with you! Live long and prosper!!
    /( _ )\ https://sites.google.com/site/changmw/
    ^ ^ https://github.com/changmw/changmw
    --- Synchronet 3.21a-Linux NewsLink 1.2