WebAPI/Security/SMS: Difference between revisions

m
mNo edit summary
Line 28: Line 28:
Authorization model: Explicit
Authorization model: Explicit


Potential mitigations: Set thresholds or warnings on premium numbers.  Only allow sending of SMS's to user-provided contacts.  Show OS confirmation of message before sending.
Potential mitigations:  
*Set thresholds or warnings on premium numbers.   
*Only allow sending of SMS's to user-provided contacts.   
*Show OS confirmation of message before sending.


== Certified (system-critical apps) ==
== Certified (system-critical apps) ==
Confirmed users
717

edits