Letters of Authorization still aren't worth the paper they aren't printed

Sean Donelan sean at donelan.com
Mon Mar 15 17:46:02 UTC 2021


Its amazing the telecommunications industry still uses or relies on 
"Letter of Authorization".  Its less secure than faxing a piece of paper 
on "letterhead."

I've said this before, check the archives.



https://www.vice.com/en/article/y3g8wb/hacker-got-my-texts-16-dollars-sakari-netnumber

While adding a number, Sakari provides the Letter of Authorization for the 
user to sign. Sakari's LOA says that the user should not conduct any 
unlawful, harassing, or inappropriate behaviour with the text messaging 
service and phone number.

But as Lucky225 showed, a user can just sign up with someone else's number 
and receive their text messages instead.


More information about the NANOG mailing list