News for hackers. Stuff that matters.

A comment on Twitch source code and customer data has reportedly been leaked. Parent comment

Re:Twitch source code and customer data has reportedly been ... by canada_dry on Wednesday October 06, 2021 @10:31AM (#28773623)
This is a readily solvable problem i.e. the only phone number I use/give online is a VOIP# that just redirects to voicemail immediately (and blocks the call if it's on my SPAMMER list of persistent annoyances).

For friends/family they have my cell# and it only lets calls through if they're in my contacts.

[ Parent | on HN ]
Re:Twitch source code and customer data has reportedly been ... by jrootabega on Wednesday October 06, 2021 @10:47AM (#28773801)
Even though it should not be, this approach is a luxury that can only be afforded by those who do not need to take live calls from previously-unknown numbers. Job hunters, medical patients, etc.
[ Parent | on HN ]
Re:Twitch source code and customer data has reportedly been ... by Semaphor on Wednesday October 06, 2021 @10:50AM (#28773836)
It’s readily solvable not to require a phone number to add a TOTP app.
[ Parent | on HN ]
Re:Twitch source code and customer data has reportedly been ... by sirclueless on Wednesday October 06, 2021 @02:40PM (#28776651)
The point isn't to authenticate control of an account, it's to tie the account to some kind of expensive-to-replicate real-world cost, ideally one that most potential customers are already paying for.

Phone numbers are nice because the marginal cost to a customer is low (they probably already have one) while the marginal cost to a bad actor is high (it's expensive to acquire many of them or to change one once it's been identified as malicious).

[ Parent | on HN ]
Re:Twitch source code and customer data has reportedly been ... by Semaphor on Wednesday October 06, 2021 @03:05PM (#28776951)
My current phone contract: 3.99€/month

My current twitch subscriptions: 11.97€/month

I can’t really see how they need my phone number to make it too expensive to be a bot.

And if that is the thing, then that’d makes them even more shady, claiming it’s for account security when it’s for their bit protection.

[ Parent | on HN ]
Re:Twitch source code and customer data has reportedly been ... by dhimes on Wednesday October 06, 2021 @10:40AM (#28773713)
How much does your VOIP cost?
[ Parent | on HN ]
Re:Twitch source code and customer data has reportedly been ... by canada_dry on Wednesday October 06, 2021 @10:58AM (#28773925)
I use voip.ms and is pay-as-you-go so it's nominal e.g. $1-2/mnth. It allows setting up all sorts of call handling rules (time-of-day, CID lists, call trees).
[ Parent | on HN ]