Hacker News new | past | comments | ask | show | jobs | submit login

> For the high barrier cost of $5. Wow, such security. Bravo folks.

$5 is at least 5x the cost of a voip number. I'm not a bank, but if I'm spending money to verify you control a number, I feel better when you (or someone else) has spent $5 on the number than if it was $1 or less.




"... but if I'm spending money to verify you control a number, I feel better when you (or someone else) has spent $5 ..."

This is exactly it.

All of these auth mechanisms that tie back to "real" phone numbers and other aspects of "real identity" are not for you - they are not for your security.

These companies have a brutal, unrelenting scam/spam problem that they have no idea how to solve and so the best they can do is just throw sand in the gears.

So, when twilio (for instance) refuses to let you 2FA with anything other than tracing back to a real mobile SIM[1] (how ironic ...) it is not to help you - it is designed to slow down abusers.

[1] The "authy" workflow is still backstopped by a mobile SIM.


>All of these auth mechanisms that tie back to "real" phone numbers and other aspects of "real identity" are not for you - they are not for your security.

>These companies have a brutal, unrelenting scam/spam problem that they have no idea how to solve and so the best they can do is just throw sand in the gears.

Sure does a great job for all the various online social media places that ostensibly have nothing to do with transacting money, still want my phone number, and still get overrun with spam and (promotion of) scams....


It's a whole bunch of tradeoffs; requiring a working, non-voip phone number does raise the cost for abusers, but it's not enough to make spam unprofitable.

Requiring a deposit would be more direct, but administration of deposits would be a lot of work, and you have an uphill battle to convince users to pay anything, and even if they want to pay, accepting money is hard. And then after all that, some abusers will use your service to check their stolen credit cards.


https://www.bitsaboutmoney.com/archive/optimal-amount-of-fra...

Relevant reading.

Basically comes down to: the costs of acceptable levels of fraud < the cost of eliminating all fraud.

There are processes that would more or less eliminate all fraud, but they are such a pain in the ass that we just deal with the fraud instead.


Okay. So let me just pay an "application fee" or some such instead of making me jump through hoops.

I don't care. I know it's a numbers game. I know they don't care about me. But companies absolutely lose my business because of this bullshit.


Also, that is clearly a workaround that took some research to do. Aka you’re probably in the top 1% of the population from a ‘figuring out workarounds’ perspective.

VoIP is so well known (and automated) to do, even at $.10, it would be a magnitude easier to do.

Banks are always slow, and behind the times - because they are risk adverse. That has pros and cons.


It makes me think of linux distros.

there are the ones that closely follow software updates and you get to complain that things are breaking all the time.

and there are the stable distros, now you get to complain how old and out of date everything is.


I still have about $15 of international calling credit on a GV number I hardly use anymore with no option of transferring or using that balance on a different platform like Google's Play store.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: