benjojo.co.uk

benjojo posted 07 Jan 2025 17:10 +0000

Huh, first ever case of seeing a "verified" RCS message like this... from HMRC?!

What "verified by BT" actually means in this context is a bit of a mystery, but the whole thing seems a tad jank, this is the first non-spam RCS message I've gotten so far

rbo_ne@chaos.social replied 07 Jan 2025 18:24 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/84Tk5L1P5TK76TcN13

@benjojo that sounds like a new business model to sell „verification“. Now that SSL/TLS certs are not a cashcow anymore.

benjojo replied 07 Jan 2025 18:26 +0000
in reply to: https://chaos.social/users/rbo_ne/statuses/113788470467987305

@rbo_ne email has this quirk as well called BMI, it's being treated by the Certificate Authorities as the new EV cash cow

rbo_ne@chaos.social replied 07 Jan 2025 18:31 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/z6871d95cqrZgtTrpf

@benjojo oh yes, there’s very good information available on that by @hanno :-)

https://berlin2024.mini.debconf.org/talks/17-breaking-dkim-and-bimi-with-the-2008-debian-openssl-bug/

puckipedia@puckipedi.. replied 07 Jan 2025 17:13 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/84Tk5L1P5TK76TcN13

(https://benjojo.co.uk/u/benjojo)

@benjojo my MNO sent some; the other ones i've seen are google OTP codes

puckipedia@puckipedi.. replied 07 Jan 2025 17:15 +0000
in reply to: https://puckipedia.com/4uxb-qrnm/y7no

(https://benjojo.co.uk/u/benjojo)

@benjojo (the "Verified" here i believe is just "this is a business RCS account" - out of interest, try "show details" on one of these? it should show something email-ish iwrc)

rosyna@mastodon.soci.. replied 07 Jan 2025 20:39 +0000
in reply to: https://puckipedia.com/hg3b-fqfe/b7wy

@puckipedia @benjojo The RCS business verification is done via Google’s Jibe services, most-likely. As Google’s Jibe is what carriers pay for to implement RCS (that’s why Google pushes RCS so hard).

Verification steps: https://developers.google.com/business-communications/rcs-business-messaging/guides/launch?model=xion

It’s so ripe for abuse Google had to shut it down in India: https://www.theverge.com/2022/6/1/23150243/google-rcs-ads-india-spam-verified-business

alexlehm@mastodon.so.. replied 07 Jan 2025 17:20 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/84Tk5L1P5TK76TcN13

@benjojo BT is likely the service provider that runs the RCS service for your mobile, so they have to check the identity of the sender

srtcd424@mas.to replied 07 Jan 2025 17:54 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/84Tk5L1P5TK76TcN13

@benjojo I can't remember whether I originally enabled it manually or if it happened on an upgrade, but after receiving only spam for a few weeks I disabled it again. I'm struggling to see the point in 2024 - though some sort of competent sender verification for SMS might be worth it, I suppose.