Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.mobile.android > #154223

Re: SMS spoofing

Show all headers | View raw

On 2026-06-18 15:40, VanguardLH wrote:
> "Carlos E. R." <robin_listas@es.invalid> wrote:
> 
>> VanguardLH wrote:
>>
>>> Chrome and Edge (a Chromium derivative) will show the punycode version
>>> of an IDN URL to prevent homograph attacks.  In Firefox, you have to
>>> edit a punycode setting in about:config:
>>>
>>>     network.IDN_show_punycode = true
>>
>> No such setting.
> 
> A setting not defined results in using its default setting.  If you want
> to change its setting, but it is not currently defined, you have to
> create it to give it a different setting.
> 
> https://kb.mozillazine.org/Network.IDN_show_punycode
> 
> I suggested IDNs could be used for phishing, but that's not the only way
> to fake URLs.

I had typed puni instead of puny. But that changed nothing, the url 
opened normally, and resolves to an IP that can be theirs. It is 
strange, but the message could be legitimate (and wrong).

My main question is if companies switching to sending RCS instead of SMS 
would avoid impersonating the sender, because RCS uses certificates. On 
the other hand, one certificate exchange per client in the database...

> 
> The company may have no one there knowledgeable about their website.
> Could be a hiccup on their end that generated a bogus message.  I've
> gotten those from my health plan.  An e-mail tells me an appointment got
> cancelled, but when I check at the website the appointment is still
> listed.  Then later I get another e-mail telling me the cancellation
> notice was erroneous, and to ignore it.  When I called the clinic, they
> said the appointment was still scheduled, and had no idea why I got the
> cancellation notice.  Same for my pharmacy: when there is a problem with
> their website, the pharmacy store has no clue about their website, no
> one there can help, and they don't know who to contact.  Some joker for
> their website made a change which caused the fuck up, but most times it
> isn't caught.
> 
> Sometimes they get accounts wrong.  The SMS text you showed only
> mentioned a claim number.  No other identifying patient info, like
> account number, or your name.  I've gotten texts from my car dealer
> saying they're done with the lube job, and to come pick up my vehicle,
> except I never dropped off my vehicle at their shop.  It's still still
> sitting in my garage.  They sent the text to the wrong phone number.  I
> got someone else's notice.


-- 
Cheers,
        Carlos E.R.
        ES🇪🇸, EU🇪🇺;

Back to comp.mobile.android | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-18 10:01 +0200
  Re: SMS spoofing VanguardLH <V@nguard.LH> - 2026-06-18 03:36 -0500
    Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-18 14:04 +0200
      Re: SMS spoofing Andy Burns <usenet@andyburns.uk> - 2026-06-18 13:07 +0100
        Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-18 14:18 +0200
      Re: SMS spoofing VanguardLH <V@nguard.LH> - 2026-06-18 08:40 -0500
        Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-18 19:00 +0200
          Re: SMS spoofing AJL <noemail@none.com> - 2026-06-18 18:08 +0000
            Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-18 20:49 +0200
          Re: SMS spoofing VanguardLH <V@nguard.LH> - 2026-06-19 01:05 -0500
            Re: SMS spoofing Andy Burns <usenet@andyburns.uk> - 2026-06-19 07:46 +0100
              Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-19 12:12 +0200
              Re: SMS spoofing VanguardLH <V@nguard.LH> - 2026-06-20 03:14 -0500
                Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-20 10:25 +0200
            Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-19 12:11 +0200
  Re: SMS spoofing Andy Burns <usenet@andyburns.uk> - 2026-06-18 10:13 +0100
    Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-18 14:05 +0200
  Re: SMS spoofing Theo <theom+news@chiark.greenend.org.uk> - 2026-06-18 11:38 +0100
    Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-18 14:10 +0200
      Re: SMS spoofing Philippe <p.naudin+nntp@free.fr> - 2026-06-18 14:48 +0200
      Re: SMS spoofing VanguardLH <V@nguard.LH> - 2026-06-18 08:57 -0500
        Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-18 19:14 +0200
  Re: SMS spoofing AJL <noemail@none.com> - 2026-06-18 15:56 +0000
  Re: SMS spoofing Jörg Lorenz <hugybear@gmx.net> - 2026-06-19 09:13 +0200
    Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-19 12:13 +0200
      Re: SMS spoofing Jörg Lorenz <hugybear@gmx.net> - 2026-06-19 14:16 +0200
        Re: SMS spoofing Theo <theom+news@chiark.greenend.org.uk> - 2026-06-19 17:22 +0100
          Re: SMS spoofing Jörg Lorenz <hugybear@gmx.net> - 2026-06-19 21:23 +0200
          Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-20 01:17 +0200
        Re: SMS spoofing "Carlos E. R." <robin_listas@es.invalid> - 2026-06-20 01:14 +0200

csiph-web