News for hackers. Stuff that matters.
Re:Twitch source code and customer data has reportedly been ... by Semaphor on Wednesday October 06, 2021 @10:50AM (#28773836)
It’s readily solvable not to require a phone number to add a TOTP app.
Re:Twitch source code and customer data has reportedly been ... by sirclueless on Wednesday October 06, 2021 @02:40PM (#28776651)
The point isn't to authenticate control of an account, it's to tie the account to some kind of expensive-to-replicate real-world cost, ideally one that most potential customers are already paying for.

Phone numbers are nice because the marginal cost to a customer is low (they probably already have one) while the marginal cost to a bad actor is high (it's expensive to acquire many of them or to change one once it's been identified as malicious).

Re:Twitch source code and customer data has reportedly been ... by Semaphor on Wednesday October 06, 2021 @03:05PM (#28776951)
My current phone contract: 3.99€/month

My current twitch subscriptions: 11.97€/month

I can’t really see how they need my phone number to make it too expensive to be a bot.

And if that is the thing, then that’d makes them even more shady, claiming it’s for account security when it’s for their bit protection.