Security Flashcards
What are Twilio’s 3 Account Security products?
- ) Authy
- ) Verify
- ) Lookup
Why is the trend moving to phone numbers for user identity?
- Email addresses are easy to mass create, phone numbers are not
- There is a lot of useful data behind a phone number that can be used to protect users
Why is account security essential for every business?
- Reduce fraudulent and fake accounts
- Limit account take-overs
- Reduce recovery support costs
- Improved user experience
What does Twilio Lookup do?
Filters out unwanted or invalid numbers
- Formatting: Valid number?
- Capabilities: SMS? Voice?
- Type: VoIP? Mobile?
What does Twilio Lookup do?
- ) Filters out unwanted or invalid numbers
- Formatting: Valid number?
- Capabilities: SMS? Voice?
- Type: VoIP? Mobile?
2.) Increases message deliverability
- ) Fraud Signals
- Has number been recently ported?
- Has phone been roaming?
What will a Twilio Lookup pull?
- Carrier
- Mobile Type
- Country code
- Network code (tied to carrier)
What are good discovery questions for Lookup?
- ) Are you experiencing fraud in your new user registration flow?
- ) Would it be helpful to screen out VoIP and landline numbers to reduce or eliminate fraud?
- ) Do you have a lot of phone numbers in your database that you just need to validate?
Who are Twilio Lookup partners?
Whitepages Pro
Nextcaller
IceHook
Who are Twilio Lookup Competitors?
TeleSign
MessageBird
Nexmo
Can Twilio Lookup guarantee the accuracy of the data?
We check multiple data sources to ensure the highest quality data possible, but are unable to fully guarantee accuracy. Ex. some people opt out of caller ID wouldn’t show up in Caller ID lookup or if a parent/relative set up their phone number when they first received it.
Why is certain information only available in the U.S.?
Currently we have good data sources from the US, we are working on expanding the info to more regions.
Can you provide an SLA for latency for Lookup?
Yes, we can provide SLA’s on the latency and responsiveness of our API’s. However some of the data relies on partners and carriers, and this can impact performance.
What are the 2 pieces of Twilio Verify?
Verification
- Signup, Registration
- Initial account creation & mobile app download
- Ensuring user is real & number is correct
Authentication
- Logins and authorizations
- Provides ongoing security for users’ accounts
- Protecting user information & actions within account
Why would someone need Twilio Verify?
- Confirm identity using a phone number
- Fraud reduction, fake account prevention, account recovery and mobile marketing
What comes with Twilio Verify?
- Fully packaged API
- Highly customizable
- Pre-bought or bring your own short code
- Android SDK built on Google features