3 ms·
> and a phone number that they can send the OTP to. I give them a phone number, it's not even the one on the account, they send the text to it. This regularly
by lxgr 1y ago
> and a phone number that they can send the OTP to. I give them a phone number, it's not even the one on the account, they send the text to it.
This regularly blows my mind.
Presumably it’s some data broker or phone carrier integration, because for me, the answer is usually “sorry, we can’t verify that number, is this a postpaid contract in your name?”
No, it’s not. Oh, that’s a requirement for doing business with you? In that case, I won’t.
- SoftTalker 1y agoPeople get new phones and new phone numbers. Frequently, compared to landline days. The alternative is to be permanently locked out of everything if you get a new phone number.
- lxgr 1y agoWell, I’m not doing business with a company that trusts any random phone carrier’s identity assertion more than me in determining what is and isn’t my phone number, so I guess it works out nicely. And if a company can’t be bothered to have a fallback verification flow in case I do lose access to my phone number somehow, that doesn’t increase confidence either. I’m a person, not a phone number.
- Henchman21 1y agoSo, if I may ask, do you have a smartphone? What kind and who is your carrier? It seems to me your stance would preclude owning a smartphone?
- lxgr 1y agoI do, but that doesn't mean I need to participate in ridiculous forms of authentication.
- ethbr1 1y agoThe parent's gripe is presumably about many bad SMS-based 2FA implementations banning non-post-paid numbers from use. E.g. Blizzard (assuming they still do this) If they want to be aggressive about fraudulent activity, fine, but don't restrict perfectly valid phone numbers from being used in their required 2FA scheme.