1) You are right about that, I stand corrected. At least as far SMScon is not able to optionally silently grab the SMScon-SMS-messages and not to show on the desktop or signal any normal way SMS has come. 2) There is currently 15 different SMS-commands. I haven't yet looked at the code, but checking the first word of the income SMS against 15 different strings seems like more processing work than checking it against just one password string. Approximately 15 times more work if done in simple way.