Show HN: Hacking SMS Voting(jonathanhculver.tumblr.com)
jonathanhculver.tumblr.com
Show HN: Hacking SMS Voting
http://jonathanhculver.tumblr.com/post/50314188473/sms-vote-inflator
3 comments
Real URL: http://jonathanhculver.tumblr.com/post/50314188473/sms-vote-...
Tropo looked good. I signed up. And then I changed my password...
> The password you have entered is invalid. Passwords may contain numbers, letters, dashes, periods, and underscores.
I guess I'm not using it.
> The password you have entered is invalid. Passwords may contain numbers, letters, dashes, periods, and underscores.
I guess I'm not using it.
That's too bad. I love them because they allow you to do all development for free and only pay when you release to production.
did Tropo not require any kind of verification on the phone numbers you were sending messages from?
Those are numbers assigned to his tropo account (at $3/month per number for a Tropo production account); Tropo doesn't allow for sender spoofing on SMS.
I'm not sure why his company would run an internal SMS voting campaign, and not limit to phone numbers from the employee address book, but I'm guessing they'll start that pretty soon.
I'm not sure why his company would run an internal SMS voting campaign, and not limit to phone numbers from the employee address book, but I'm guessing they'll start that pretty soon.
Yeah great point, I'm sure that's what they will start doing. Luckily the company is small enough that it's feasible to check against all employee phone numbers.
They require an outbound token associated with your app