6 ms·

Twitter reopened my service’s account after two months when I refused to hand over my mobile number. Pretty much every single service immediately bans me upon

by inapis 7y ago

Twitter reopened my service’s account after two months when I refused to hand over my mobile number. Pretty much every single service immediately bans me upon account creation if I don’t hand over my mobile number. Instagram banned me for “violating terms of service” before I had even chosen a username - before I had posted even a single thing. Makes me wonder if signing up for a service was in their list of violations itself? I mean, c’mon. It’s pretty much a ploy to gather mobile numbers under the garb of security or spam.

pjc50 7y ago
It's annoying, but what other accessible solutions are there to avoid mass creation of "fake" accounts?
- rgrs 7y ago
  Then let these companies guarantee that its one-time request and it will not be used for pushing anything else.
  - RandomBacon 7y ago
    Just like FB promised phone numbers were only going to be used for 2FA? https://nakedsecurity.sophos.com/2019/03/05/facebook-criticised-for-misuse-of-phone-numbers-provided-for-security/ https://nakedsecurity.sophos.com/2019/03/05/facebook-critici...
  - marssaxman 7y ago
    What guarantee could they possibly offer which we would believe? Of course they will exploit any information they can convince us to hand over.
- hqrlk 7y ago
  What is a "fake" account? One without a real name? The extra ones, when a person decides to create more than one?
  - mFixman 7y ago
    Spam accounts.
- r_singh 7y ago
  I get it, it's super easy to create Twitter bots and spread disinformation, etc. However, that's a problem with social media that we're discovering now (after a decade and a half or so) and the companies need to think about it, not just implement a solution that compromises user privacy because they have leverage. These cos. copyright all user created information. So they want to make money from it and want credit for good content. However, want to reduce liabilities that arise from content created by malicious actors. Can't have the cake and eat it too.
  - raxxorrax 7y ago
    Previously users were just anonymous with all consequences that entailed. But even today I don't really think the spreading of disinformation is a large problem and users just do that themselves often enough. Information you get today is probably still more accurate compared to times where every info was distributed through news papers.
    - r_singh 7y ago
      You’re right in a way. However, newspapers have to have all stakeholders in on it: politicians, big businesses (aka advertisers), readers (trust factor) and their own reputation (journalists, etc). With bots, you can really be a nuisance with a little bit of effort.
- deleted 7y ago
  [deleted]
- zelly 7y ago
  Micropayments. $5 bucks to create an account, non-refundable (Bitcoin accepted). Or you can provide your phone number, your choice.
  - levythe 7y ago
    $5 is not micro. 5¢ is.
miohtama 7y ago
Here is an old study of effectiveness of phone number verification: http://static.googleusercontent.com/media/research.google.com/en/us/pubs/archive/43134.pdf http://static.googleusercontent.com/media/research.google.co... TL;DR it is effective. Privacy and preventing misinformation bot armies are not conflicting goals, but unfortunately implementations achieving one hurts the other. Only way to prevent fake accounts is to have some kind of proxy for real identity confirmation. Unfortunately a phone number verification is currently only such global scalable method. Most likely you used an VPN IP address, privacy plugins or similar for the sign up that were flagged before as the source of problems.
- alxlaz 7y ago
  It's not just about privacy -- you're one data breach away from having your phone number leaked to a bunch of shady gangsters who, for bonus points, can also read through the Twitter posts from the account associated with it. Pulling off a social engineering attack by phone is a hell of a lot easier than by email, which a lot of people, including non-technical people, treat somewhat more defensively. I wouldn't mind sharing my phone number if it were for my protection, but it's not -- it's a risk for me, and they ask me to do it for their platform's protection. More specifically, for the protection of that platform's profits. I honestly don't mind bots, it's advertisers and politicians who do, and they're the ones keeping the whole thing profitable.
  - miohtama 7y ago
    As a counterpoint, I'd rather have everyone to have a forced phone number verification to mitigate the negative effects of the social network. We could quarantine privacy sensitive users, with all trolls and bots, to some darknet privacy discussion boards and something like Mastodon. I'd rather sacrifice the privacy for the general good experience of my Twitter service.
    - alxlaz 7y ago
      Previous experience with the Internet shows that all this would achieve would be a boom in the Temporary Phone Numbers as a Service (TPNaaS) market, so that trolls, bots and cybercriminals could get validated as easily as my grandma, while getting all those pesky privacy advocates out of the way. Edit: plus, I'm not sure how that invalidates my concern. The only thing better than a data leak with personal information is a data leak with personal information that's definitely true, up-to-date and complete -- and the only datapoints of dubious values belong to bots, making them easy to cross off your list.
deogeo 7y ago
It would be nice if they were up-front about it, asking for e-mail and phone upon creation, instead of intentionally misleading users an e-mail is all they need.
- teddyuk 7y ago
  Twotter asked for my phone for “security” then started texting things like it was someone’s birthday so I quickly removed it. Never again twattrr
Hitton 7y ago
Especially when they have such spotless record of using phone numbers only for legitimate needs[0] recently. [0]: https://www.techworm.net/2019/10/phone-numbers-email-address.html https://www.techworm.net/2019/10/phone-numbers-email-address...
raxxorrax 7y ago
The same happened with my Microsoft account (no work/enterprise account). It was locked, allegedly violating terms and services. I did absolutely nothing with this account. Besides maybe using a gmail account to register, I don't really understand the reason for the block and no details were provided of course. Since then I tried to delete the account, but on any attempts to do so MS tries to get my phone number, which I don't want to provide. Their support is completely inexistent, because you would need to log in of course. I would like to send them a cease and desists letter against blocking account deletion attempts. I am not sure, but I believe their conduct to be illegal in the EU where I am located. Probably would just cost me money, but they would deserve it.
- pferde 7y ago
  Yep, I've had that happen with a private outlook.com account last month. I literally just created the account and used it just once, to register for an Azure certification exam. I sent no e-mails from that account, I just checked it twice or thrice for incoming exam information emails, until suddenly I could not log in because of ToS violations. Stay classy, Microsoft!
zelly 7y ago
It's legitimately to stop spam. Captchas can be gamed or purchased. IPv6 makes banning IPs futile. Getting a SIM card is the only thing that bots cannot do. The only other alternative to stop spam is micropayments (at a similar cost to a SIM card). I would actually like to see that as an option instead of providing my mobile number--preferably using Bitcoin because my credit card number is even more confidential than my phone number.
- r_singh 7y ago
  If you really want to orchestrate some sort of spam attack with bots. You can just purchase a hundred numbers on twilio or bandwidth and just automate the who OTP process with Puppeteer. If it’s important enough. You’re right about it being a lot more annoying though.
  - skinnymuch 7y ago
    The service has to just not allow VoIP numbers like Twilio. A handful are already like that. Like Craigslist as last example I came across.
  - zelly 7y ago
    Twillio and Google Voice numbers do not work for phone verification on Twitter/Facebook/Google properties. VoIP phone numbers are sold in blocks and well-known to companies who subscribe to those lists (basically all social media). Twilio numbers do work for the scrappier sites though.
- Dylan16807 7y ago
  > IPv6 makes banning IPs futile. For wired connections, isn't banning the customer-sized subnet about the same in terms of effectiveness ?
- freeflight 7y ago
  It's legitimately to stop spam. That might be what it originally started out as, but by now many platforms seem to think of it as just more personal data they can monetize [0] [1]. [0] https://techcrunch.com/2019/10/08/twitter-admits-it-used-two-factor-phone-numbers-and-emails-for-targeted-advertising/ https://techcrunch.com/2019/10/08/twitter-admits-it-used-two... [1] https://www.engadget.com/2018/09/28/facebook-two-factor-phone-numbers-ads/ https://www.engadget.com/2018/09/28/facebook-two-factor-phon...
about_help 7y ago
Just part of the panopticon, they are forcing you to make it super easy for governments to monitor you. Tracking email addresses and correlating amongst shared names makes for more false negatives, tie it to a phone number and you're doing their work for them.
newscracker 7y ago
Anyone working on Instagram should read this. I’d created an Instagram account to try it out. I posted a few posts (like infographics, I wasn’t going to give real photos to Facebook) and didn’t continue later. After some months I found I couldn’t login and that my account was disabled for “violating terms”. There was nothing in that account that violated any terms — no spam, no hate speech, no nudity, no spamming others for likes or followers. The only thing that stood out was that I mostly used a web browser to post and sometimes shared a photo to the app instead of giving the app access to all my photos. The account continued to work for quite sometime after I stopped posting and interacting. I tried to appeal, but it wanted a real photo of me holding some handwritten information. No thanks, I don’t really need an abusive and flakey platform to have my real photo. I abandoned Instagram then. It’s one of the most needlessly aggressive platforms that deactivates accounts for no good reason and bullies people into giving their photo and/or phone number. I hope Instagram dies quickly because of this stupid aggressiveness. More people should start using decentralized platforms where one may have a better chance of expressing oneself (I’m talking about regular, non-spam speech). All these centralized platforms like Twitter, Facebook and Instagram are big time bullies.

by inapis 7y ago

pjc50 7y ago

It's annoying, but what other accessible solutions are there to avoid mass creation of "fake" accounts?

rgrs 7y ago
Then let these companies guarantee that its one-time request and it will not be used for pushing anything else.
- RandomBacon 7y ago
  Just like FB promised phone numbers were only going to be used for 2FA? https://nakedsecurity.sophos.com/2019/03/05/facebook-criticised-for-misuse-of-phone-numbers-provided-for-security/ https://nakedsecurity.sophos.com/2019/03/05/facebook-critici...
- marssaxman 7y ago
  What guarantee could they possibly offer which we would believe? Of course they will exploit any information they can convince us to hand over.
hqrlk 7y ago
What is a "fake" account? One without a real name? The extra ones, when a person decides to create more than one?
- mFixman 7y ago
  Spam accounts.
r_singh 7y ago
I get it, it's super easy to create Twitter bots and spread disinformation, etc. However, that's a problem with social media that we're discovering now (after a decade and a half or so) and the companies need to think about it, not just implement a solution that compromises user privacy because they have leverage. These cos. copyright all user created information. So they want to make money from it and want credit for good content. However, want to reduce liabilities that arise from content created by malicious actors. Can't have the cake and eat it too.
- raxxorrax 7y ago
  Previously users were just anonymous with all consequences that entailed. But even today I don't really think the spreading of disinformation is a large problem and users just do that themselves often enough. Information you get today is probably still more accurate compared to times where every info was distributed through news papers.
  - r_singh 7y ago
    You’re right in a way. However, newspapers have to have all stakeholders in on it: politicians, big businesses (aka advertisers), readers (trust factor) and their own reputation (journalists, etc). With bots, you can really be a nuisance with a little bit of effort.
deleted 7y ago
[deleted]
zelly 7y ago
Micropayments. $5 bucks to create an account, non-refundable (Bitcoin accepted). Or you can provide your phone number, your choice.
- levythe 7y ago
  $5 is not micro. 5¢ is.

miohtama 7y ago

Here is an old study of effectiveness of phone number verification: http://static.googleusercontent.com/media/research.google.com/en/us/pubs/archive/43134.pdf http://static.googleusercontent.com/media/research.google.co... TL;DR it is effective. Privacy and preventing misinformation bot armies are not conflicting goals, but unfortunately implementations achieving one hurts the other. Only way to prevent fake accounts is to have some kind of proxy for real identity confirmation. Unfortunately a phone number verification is currently only such global scalable method. Most likely you used an VPN IP address, privacy plugins or similar for the sign up that were flagged before as the source of problems.

alxlaz 7y ago
It's not just about privacy -- you're one data breach away from having your phone number leaked to a bunch of shady gangsters who, for bonus points, can also read through the Twitter posts from the account associated with it. Pulling off a social engineering attack by phone is a hell of a lot easier than by email, which a lot of people, including non-technical people, treat somewhat more defensively. I wouldn't mind sharing my phone number if it were for my protection, but it's not -- it's a risk for me, and they ask me to do it for their platform's protection. More specifically, for the protection of that platform's profits. I honestly don't mind bots, it's advertisers and politicians who do, and they're the ones keeping the whole thing profitable.
- miohtama 7y ago
  As a counterpoint, I'd rather have everyone to have a forced phone number verification to mitigate the negative effects of the social network. We could quarantine privacy sensitive users, with all trolls and bots, to some darknet privacy discussion boards and something like Mastodon. I'd rather sacrifice the privacy for the general good experience of my Twitter service.
  - alxlaz 7y ago
    Previous experience with the Internet shows that all this would achieve would be a boom in the Temporary Phone Numbers as a Service (TPNaaS) market, so that trolls, bots and cybercriminals could get validated as easily as my grandma, while getting all those pesky privacy advocates out of the way. Edit: plus, I'm not sure how that invalidates my concern. The only thing better than a data leak with personal information is a data leak with personal information that's definitely true, up-to-date and complete -- and the only datapoints of dubious values belong to bots, making them easy to cross off your list.

deogeo 7y ago

It would be nice if they were up-front about it, asking for e-mail and phone upon creation, instead of intentionally misleading users an e-mail is all they need.

teddyuk 7y ago
Twotter asked for my phone for “security” then started texting things like it was someone’s birthday so I quickly removed it. Never again twattrr

Hitton 7y ago

Especially when they have such spotless record of using phone numbers only for legitimate needs[0] recently. [0]: https://www.techworm.net/2019/10/phone-numbers-email-address.html https://www.techworm.net/2019/10/phone-numbers-email-address...

raxxorrax 7y ago

The same happened with my Microsoft account (no work/enterprise account). It was locked, allegedly violating terms and services. I did absolutely nothing with this account. Besides maybe using a gmail account to register, I don't really understand the reason for the block and no details were provided of course. Since then I tried to delete the account, but on any attempts to do so MS tries to get my phone number, which I don't want to provide. Their support is completely inexistent, because you would need to log in of course. I would like to send them a cease and desists letter against blocking account deletion attempts. I am not sure, but I believe their conduct to be illegal in the EU where I am located. Probably would just cost me money, but they would deserve it.

pferde 7y ago
Yep, I've had that happen with a private outlook.com account last month. I literally just created the account and used it just once, to register for an Azure certification exam. I sent no e-mails from that account, I just checked it twice or thrice for incoming exam information emails, until suddenly I could not log in because of ToS violations. Stay classy, Microsoft!

zelly 7y ago

It's legitimately to stop spam. Captchas can be gamed or purchased. IPv6 makes banning IPs futile. Getting a SIM card is the only thing that bots cannot do. The only other alternative to stop spam is micropayments (at a similar cost to a SIM card). I would actually like to see that as an option instead of providing my mobile number--preferably using Bitcoin because my credit card number is even more confidential than my phone number.

r_singh 7y ago
If you really want to orchestrate some sort of spam attack with bots. You can just purchase a hundred numbers on twilio or bandwidth and just automate the who OTP process with Puppeteer. If it’s important enough. You’re right about it being a lot more annoying though.
- skinnymuch 7y ago
  The service has to just not allow VoIP numbers like Twilio. A handful are already like that. Like Craigslist as last example I came across.
- zelly 7y ago
  Twillio and Google Voice numbers do not work for phone verification on Twitter/Facebook/Google properties. VoIP phone numbers are sold in blocks and well-known to companies who subscribe to those lists (basically all social media). Twilio numbers do work for the scrappier sites though.
Dylan16807 7y ago
> IPv6 makes banning IPs futile. For wired connections, isn't banning the customer-sized subnet about the same in terms of effectiveness ?
freeflight 7y ago
It's legitimately to stop spam. That might be what it originally started out as, but by now many platforms seem to think of it as just more personal data they can monetize [0] [1]. [0] https://techcrunch.com/2019/10/08/twitter-admits-it-used-two-factor-phone-numbers-and-emails-for-targeted-advertising/ https://techcrunch.com/2019/10/08/twitter-admits-it-used-two... [1] https://www.engadget.com/2018/09/28/facebook-two-factor-phone-numbers-ads/ https://www.engadget.com/2018/09/28/facebook-two-factor-phon...

about_help 7y ago

Just part of the panopticon, they are forcing you to make it super easy for governments to monitor you. Tracking email addresses and correlating amongst shared names makes for more false negatives, tie it to a phone number and you're doing their work for them.

newscracker 7y ago

Anyone working on Instagram should read this. I’d created an Instagram account to try it out. I posted a few posts (like infographics, I wasn’t going to give real photos to Facebook) and didn’t continue later. After some months I found I couldn’t login and that my account was disabled for “violating terms”. There was nothing in that account that violated any terms — no spam, no hate speech, no nudity, no spamming others for likes or followers. The only thing that stood out was that I mostly used a web browser to post and sometimes shared a photo to the app instead of giving the app access to all my photos. The account continued to work for quite sometime after I stopped posting and interacting. I tried to appeal, but it wanted a real photo of me holding some handwritten information. No thanks, I don’t really need an abusive and flakey platform to have my real photo. I abandoned Instagram then. It’s one of the most needlessly aggressive platforms that deactivates accounts for no good reason and bullies people into giving their photo and/or phone number. I hope Instagram dies quickly because of this stupid aggressiveness. More people should start using decentralized platforms where one may have a better chance of expressing oneself (I’m talking about regular, non-spam speech). All these centralized platforms like Twitter, Facebook and Instagram are big time bullies.