Sysop: | Amessyroom |
---|---|
Location: | Fayetteville, NC |
Users: | 23 |
Nodes: | 6 (0 / 6) |
Uptime: | 49:45:34 |
Calls: | 583 |
Files: | 1,138 |
Messages: | 111,301 |
Can you receive SMS verification code from Yahoo Mail?
On Fri, 8 Aug 2025 16:16:21 +0800, Mr. Man-wai Chang wrote:
Can you receive SMS verification code from Yahoo Mail?
SMS verification codes are not considered a good form of second authentication factor.
Can you receive SMS verification code from Yahoo Mail?
I could not receive any SMS 2FA messages when logging in Yahoo Mail from Hong Kong. And I dunno how to report it to Yahoo, without paying money.
Mr. Man-wai Chang <toylet.toylet@gmail.com> wrote:
Can you receive SMS verification code from Yahoo Mail?
I could not receive any SMS 2FA messages when logging in Yahoo Mail from >>Hong Kong. And I dunno how to report it to Yahoo, without paying money.
Did this work before, or never worked?
You sure your phone number is correct in your Yahoo account, and it
points to a mobile phone (for SMS support)?
Did the login page telling you about sending a security code give you an >option to send the code using an alternate method? If you defined a
recovery e-mail address in your Yahoo account, try resending the code
using e-mail.
https://help.yahoo.com/kb/add-remove-recovery-method-sln2058.html
. . .--- Synchronet 3.21a-Linux NewsLink 1.2
"Mr. Man-wai Chang" <toylet.toylet@gmail.com> wrote:
Can you receive SMS verification code from Yahoo Mail?
Did this work before, or never worked?
You sure your phone number is correct in your Yahoo account, and it
points to a mobile phone (for SMS support)?
VanguardLH <V@nguard.LH> wrote:
Mr. Man-wai Chang <toylet.toylet@gmail.com> wrote:
If it's not correct, how the hell is he supposed to log in to change it?
On 8/8/2025 11:27 pm, Adam H. Kerman wrote:
If it's not correct, how the hell is he supposed to log in to change it?
Yahoo Mail allows sending 2FA code to verified email account.
VanguardLH <V@nguard.LH> wrote:
Mr. Man-wai Chang <toylet.toylet@gmail.com> wrote:
Can you receive SMS verification code from Yahoo Mail?
I could not receive any SMS 2FA messages when logging in Yahoo Mail
from Hong Kong. And I dunno how to report it to Yahoo, without
paying money.
You sure your phone number is correct in your Yahoo account, and it
points to a mobile phone (for SMS support)?
If it's not correct, how the hell is he supposed to log in to change it?
Did the login page telling you about sending a security code give you
an option to send the code using an alternate method? If you
defined a recovery e-mail address in your Yahoo account, try
resending the code using e-mail.
https://help.yahoo.com/kb/add-remove-recovery-method-sln2058.html
If I give Yahoo too much identifying information, how the hell has
that increased my security?
And to my side issue: How has using 2FA in any form (via SMS or e-mail) increased your security? It doesn't. It just makes users jump though
hoops thinking security is improved.
Why/How can/do YOU say that 2/multi/FA does NOT add security?
Our findings reveal that MFA implementation offers outstanding--
protection, with over 99.99% of MFA-enabled accounts remaining
secure during the investigation period. Moreover, MFA reduces the
risk of compromise by 99.22% across the entire population and by
98.56% in cases of leaked credentials.
You can choose not to provide a recovery e-mail address, but then you
also realize that you have no means to recover the account, so it must
not be an important account.
Adam H. Kerman <ahk@chinet.com> wrote:
VanguardLH <V@nguard.LH> wrote:
Mr. Man-wai Chang <toylet.toylet@gmail.com> wrote:
. . .
If I give Yahoo too much identifying information, how the hell has
that increased my security?
Hmm, you've never had your account locked or suspended, or some stupid >regional block where you need to use a recovery account to get into the >target account. Obviously you cannot use the same account for recovery.
You can choose not to provide a recovery e-mail address, but then you
also realize that you have no means to recover the account, so it must
not be an important account.
And to my side issue: How has using 2FA in any form (via SMS or e-mail) >increased your security? It doesn't. It just makes users jump though
hoops thinking security is improved.
VanguardLH wrote:
And to my side issue: How has using 2FA in any form (via SMS or e-mail) >>increased your security? It doesn't. It just makes users jump though >>hoops thinking security is improved.
I am NOT a fan of more hoops; I think the *option* should rest w/ the >*user*/client not the server/merchant; but it would seem to add a
'layer' of security, which layering has always been presumed 'more secure'.
I don't know exactly how one should 'anticipate' his account to become >compromised, but I'm pretty sure it happens w/ significant frequency.
Why/How can/do YOU say that 2/multi/FA does NOT add security?
The platform sending the email or text message has no ability to tell
that the message wasn't intercepted before the customer received it at
his device.
I suppose one-time passcodes are safer, but those get sent by email
message which, again, may have been compromised.
Adam H. Kerman wrote:
The platform sending the email or text message has no ability to tell
that the message wasn't intercepted before the customer received it at
his device.
I suppose one-time passcodes are safer, but those get sent by email
message which, again, may have been compromised.
Well, if the adversary/interloper has all of the same identity >characteristics available to him as the legitimate user, then they are >'identical' to the merchant/server.
On 8/8/2025 4:52 pm, Lawrence D'Oliveiro wrote:
On Fri, 8 Aug 2025 16:16:21 +0800, Mr. Man-wai Chang wrote:
Can you receive SMS verification code from Yahoo Mail?
SMS verification codes are not considered a good form of second
authentication factor.
Well, I am NOT firing a nuclear missile. Simple SMS is okay for this
kind of application.
Rolling back time 20 or even 30 years, Hotmail and Yahoo Mail did NOT
even have 2FA. :)
And going back even further in time, earlier multiuser systems didnrCOt
use encrypted passwords. ITS didnrCYt even use passwords at all.
So tell us again, how is all this a good excuse for lax security on
your part?
On Fri, 8 Aug 2025 17:45:37 +0800, Mr. Man-wai Chang wrote:
On 8/8/2025 4:52 pm, Lawrence D'Oliveiro wrote:
On Fri, 8 Aug 2025 16:16:21 +0800, Mr. Man-wai Chang wrote:
Can you receive SMS verification code from Yahoo Mail?
SMS verification codes are not considered a good form of second
authentication factor.
Well, I am NOT firing a nuclear missile. Simple SMS is okay for this
kind of application.
Not sure why thatrCOs relevant, given that the Minuteman passcodes not didnrCOt use SMS, but they were set to the fixed value rCL00000000rCY <https://arstechnica.com/tech-policy/2013/12/launch-code-for-us-nukes-was-00000000-for-20-years/>.
Rolling back time 20 or even 30 years, Hotmail and Yahoo Mail did NOT
even have 2FA. :)
And going back even further in time, earlier multiuser systems didnrCOt
use encrypted passwords. ITS didnrCYt even use passwords at all.
So tell us again, how is all this a good excuse for lax security on
your part?
Personally I have never encountered an 'impossible' loss of access to an account, but I have tried to help a relative recover access to his Apple account, which 'lack of prior preparation' rendered the project
*impossible* so I strongly agree that one should have a workable plan to recover an account if 'something goes wrong'.
Well yeah, except I never believed security has been improved any more
than I believe that paperless billing saves the environment or that
plastic recycling keeps plastic out of landfills.
I've had the same Yahoo e-mail account for more than 12 years. Do not
have 2FA implemented on it. I get maybe 1, but usually 0 spam
emails/month. Go figure. I find their spam filtering to be among the
best of the free e-mail account providers. I have the same experience
with my gmail account; again no 2FA and essentially no spam.
If Yahoo Mail just failed to send me the 2FA code for whatever reasons
AND if SMS was the only way to send 2FA codes, then I would be locked
out of my account forever, until Yahoo Mail suddenly discovered and
fixed the problem. So my only option would be to turn off 2FA, going
back in time. :)
I don't use WhatsApp. I dunno why Yahoo Mail suddenly got interested in sending 2FA codes using WhatsApp.
TCP/IP is just a circuit. Everything can be captured for password---------------------------------------------------'
analysis. That's why a time-based solution (like SMS) might help
improve security a bit. ^^^
Use WhatsApp to verify your Yahoo account https://help.yahoo.com/kb/SLN36543.html
Can you receive SMS verification code from Yahoo Mail?
I could not receive any SMS 2FA messages when logging in Yahoo Mail from
Hong Kong. And I dunno how to report it to Yahoo, without paying money.