Push Or Sms

[bainbrig]

The word on the www is that push notifications are more secure than text messages.

True, or just talk? If true, why?

BillB

[spathiphyllum]

A push notification is usually from an app or software on the phone.. A txt message can have hidden consequences if you click a link in them or something..

I'd trust a notification from an unknown app more so that i would a random text message. Someone will be liable for the app, however fraud people can get away with it.

[Jackdaw33]

Wish I knew what you are talking about. It's all garbage to me.

[mccfluff]

sms are text messages, push notification are as spath says messages directly from an app. If you have a news/sports app on your phone it will send you updates on scores etc - shopping sites will send you notices of sales or coupons, a cafe like costa might offer you a free coffee or something along those lines. I'd say it depends on who is running the app as to whether they are more secure or not but generally yes.

[spathiphyllum]

IE, a notification on your phone from a news application telling you to "read a new story" has to be safer than a sms from potentially anyone. Especially if it contains a link or something making you reply with a word like "STOP" etc..

[bainbrig]

So they’re not inherently more secure, just that you normally know who they’re from.

But if I’m on to Paypal, and they send me a text with a 2-factor authentification code, it is fine, but if next week out-of-the-blue Paypal ask for my PIN numbers, it is a scam. Or am I missing something?

BillB

[spathiphyllum]

Well it depends how they ask.. Anyone can send you a Text (SMS) pretending to be someone they're not. Ever got a text and your phone somehow knows the name / company texting? This doesn't mean it is them. However to get hacked by a push notification, the hacker must hack the app used to send the notification. Big company's usually have apps that can not be hacked.

For example.. I can open my natwest banking app. If this app sends me a notification i'd trust it.. Very secure tech. However if a random number text me pretending to be natwest i would not trust it at all unless i know 100% it was their number.

[mccfluff]

they should never ask for your pin, any time that happens its goign to be a scam. If they send you a 2 factor auth code, you are trying to log in and its an extra layer of security, that can be trusted.
If paypal were to send you push notification they would be probably be to confirm you have done something - paid for goods and money sent etc

[mccfluff]

this is what paypal will use them for
"Enabling push notifications on your mobile device when you use the PayPal app allows you to receive immediate transaction status updates during the check review process, even if you close the app in the middle of a check cashing transaction. Push notifications will help you stay informed on the next necessary action to complete the review process and get your money as quickly as possible."

[Ellipsis]

Push notifications make it harder for you to be an idiot.

If you receive a text, you might easily assume it's from the purported sender - but it might not be.

When you install an app, both you and especially the App Store tend to ensure the app is from the genuine provider. Once the app is installed, only that genuine provider can send push notifications to it.

Think of it as like the difference between an ordinary phone and a Batphone. If Commissioner Gordon calls on an ordinary phone, can Batman be sure it's him? But if he calls on the Batphone (push notification), Batman can be a lot more confident.

[bainbrig]

Right, so step one on Pushes is that you have to download the appropriate application, yes?

So I might have a Paypal App, an Amazon App, a Barclays App, and so on.

Aren’t all these tentacles creeping out across my bit of digital kit a threat in themselves, or potentially so?

BB

[Ellipsis]

Yes - you should only install apps from companies you trust.

[spathiphyllum]

"Aren’t all these tentacles creeping out across my bit of digital kit a threat in themselves, or potentially so? "

No, not if they are from secure companies. And paypal, amazon and barcleys are as secure as the phone provider you're with.

For an app to send you a false 'push notification' first the company / app must be hacked itself. Which you'd probably hear about on the news. For you to be hacked via text message only takes you to be confused about something or for you to be tricked.

[mccfluff]

don't know that they are a threat as much, but bloody annoying. I have disabled all but the necessary functions that the apps need to work as they irritate me too much. If you like to shop and get deals etc, it could be very handy for discounts.

[bainbrig]

Well, not confused, at least not yet - one of the joys of old age on the horizon, no doubt - but tricked? Of course. Only a fool would say 'you can't trick me'.

I shop from home, by the way, because of disability (although when I wasn't disabled I still had a dread of high street crowds!), plus of course being overly-security conscious makes me ask the question.

BB

[spathiphyllum]

I feel like it would be very hard to compromise security through a "push notification" and it'd be a lot easier via TXT

If you have the amazon app on your phone, and it notifies you with a "push notification" then i would trust it. If someone called "amazon" tried to txt you getting you to click a link i would be extremely cautious of even opening the txt message.

[bainbrig]

Yes spath, you keep saying that and I keep acknowledging it! Maybe it’s a push-lock.