{"action":"opened","issue":{"url":"https://api.github.com/repos/actorapp/actor-platform/issues/986","repository_url":"https://api.github.com/repos/actorapp/actor-platform","labels_url":"https://api.github.com/repos/actorapp/actor-platform/issues/986/labels{/name}","comments_url":"https://api.github.com/repos/actorapp/actor-platform/issues/986/comments","events_url":"https://api.github.com/repos/actorapp/actor-platform/issues/986/events","html_url":"https://github.com/actorapp/actor-platform/issues/986","id":173552286,"number":986,"title":"How to guard against sms security weakness?","user":{"login":"forteller","id":343561,"avatar_url":"https://avatars.githubusercontent.com/u/343561?v=3","gravatar_id":"","url":"https://api.github.com/users/forteller","html_url":"https://github.com/forteller","followers_url":"https://api.github.com/users/forteller/followers","following_url":"https://api.github.com/users/forteller/following{/other_user}","gists_url":"https://api.github.com/users/forteller/gists{/gist_id}","starred_url":"https://api.github.com/users/forteller/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/forteller/subscriptions","organizations_url":"https://api.github.com/users/forteller/orgs","repos_url":"https://api.github.com/users/forteller/repos","events_url":"https://api.github.com/users/forteller/events{/privacy}","received_events_url":"https://api.github.com/users/forteller/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-08-26T22:02:30Z","updated_at":"2016-08-26T22:02:30Z","closed_at":null,"body":"According to this Motherboard article it seems like it's pretty easy for people to gain access to services that use a phone number and sms as verification. http://genius.it/10291650/motherboard.vice.com/de/read/exklusiv-wie-das-bka-telegram-accounts-von-terrorverdaechtigen-knackt\r\n\r\n> The intrusion of a Telegram account starts with an SMS: federal police investigators register a separate device for the suspect’s account. This triggers a Telegram SMS to the account holder containing an authentication code. The federal police are able to legally intercept and utilise this SMS: the investigators enter the code and register their own device. They’re in.\r\n\r\n What does Actor do to guard against this?"}}
{"actor":{"display_login":"forteller"}}