Re: Google will no longer send SMSs with six digit codes for verification

On 2025-03-05 21:43, VanguardLH wrote:

"Carlos E.R." <robin_listas@es.invalid> wrote:
 

On 2025-03-05 02:45, VanguardLH wrote:

Frank Slootweg <this@ddress.is.invalid> wrote:
>

VanguardLH <V@nguard.lh> wrote:
[...]
>

Not relevant to my statement of having to wait for SMS messages (text or
QR image content) nor there is no guaranteed delivery of SMS messages.
>
To where is the SMS message sent?  To the phone.  Okay, I'll see an SMS
message with a QR image.  Then what?  Do SMS apps have embedded scanning
of the content of SMS messages to then use an embedded QR decoder to
show the text embedded in the image (which obviates the whole point of
supposedly securing the text string in an image) that I then have to
copy/paste into some web prompt?

>
    AFAICT, "an SMS message with a QR image" is a figment of your
imagination!
>
    I think such a thing is not mentioned anywhere and not even implied
anywhere.

>
The delivery mechanism is defined where?
>

    The referenced articles mention that *use* of a code in an SMS message
will be replaced by *use* of a QR code, but that does not mean that the
QR code is *in* an SMS message. (I think that would be obvious, because
an SMS message is too small to hold a QR code, not to mention that it
can only hold character data, not binary data.)

>
I figured it could be MMS (Multimedia Messaging) instead of SMS (Short
Message Service).  MMS can be used to send pictures.  I have automatic
downloads of MMS disabled in my messaging apps.
>
However, upon some further reading, Google Prompts looks to use
notifications instead of SMS/MMS messages.  Maybe.
>

    So perhaps it's best to come up with an actual quote from the
referenced articles, which leads you to your assumption, instead of
going on and on about something which is very likely a straw man / red
herring.

>
That's the crux of the problem: there are no details on how QR images by
whatever delivery mechanism are to get decoded into strings by the user
to input into a waiting field.  All of us are just guessing for now what
are the possibilities.

>
You are imagining it wrong. You try to login on your computer; the
computer displays a picture, the phone takes a photo. There are no SMS
involved, no conversions, no fields to complete. Just point and shoot,
done. Instantly.
>
Same as currently done to login to wasap on the computer. The same
system. Known and tested.

 No, not when logging into my computer.  Google isn't involved in me
logging into my computer.

I did not say "logging into my computer". I said "login on your computer", obviously to Google, which is the context.
You are login into google in your computer; the browser you are using, or the mail application you are using displays a QR code, and tells you «take a picture with "name of app" in your registered phone, number ending in XXX». You comply, and in seconds you are authorized to complete login to google in the computer.
In the same context, the method now is that google says "you will have received an SMS in your registered phone that ends in XXX, please copy here the six digit number you received".
The rest of your writeup is irrelevant. Please focus. It is very simple, trivial really.
--
Cheers, Carlos.