News for hackers. Stuff that matters.
Re:Scammers signed up, scammed us of $870 in 15 minutes by Nextgrid on Tuesday May 26, 2020 @01:27PM (#23313933)
I'm curious, why did you have a phone verification feature to begin with; what would've been the impact of unused accounts being created? To me it seems like the verification feature did more harm than good in this case.
Re:Scammers signed up, scammed us of $870 in 15 minutes by kaushikt on Tuesday May 26, 2020 @01:34PM (#23314037)
Phone verification is NOT mandatory. However, Spike.sh is a simpler alternative to PagerDuty which means we make calls when there are important incidents. Not calling might have serious consequences.

Knowing that Phone call is important, we needed to verify it. However, making phone call to verify is NOT a good idea.

We should have sent an SMS but getting an Alphanumeric sender ID took some time and we wanted to ship quickly.

Re:Scammers signed up, scammed us of $870 in 15 minutes by kaushikt on Tuesday May 26, 2020 @01:34PM (#23314044)
I mean it's also one of those things that we thought we will come back but never did.

Tech debt bit us bad