It also might be worth developing a program yourself if you're passionate enough about it. There are a few dev shops in my city that run their own charity projects every year where they invite nonprofits to submit proposals for the work they need done, and then the shop picks a few projects to work on for free. Those seem to be super popular as well.
Most people will trust a toll-free number just as much as a shortcode, and since tons of legitimate companies use toll-free numbers for messaging it just blurs the line of what a "reputable" number looks like.
Even SendGrid, which is owned by Twilio, uses toll-free numbers for their 2FA messages instead of shortcodes.
Ahh yes, definitely the mission statement of a reputable source.
Don't get me wrong, carriers have been making strides to lower the amount of spam that's sent through the air (A2P requirements, toll-free number verification requirements, etc), but a determined scammer can still exploit SMS/MMS pretty easily.
I've never had a relationship with a family business last beyond the scope of the initial project. Things always fall apart because of family infighting, or because every business decision ends up being way too personal/emotional for them. It's never worth the hassle, trust me.
I stumbled across a pretty big security vulnerability in a restaurant's online ordering platform the other day, but the company that built the platform doesn't really have much in the way of a public presence (no social media, just a single phone number and generic email on their website), and it definitely doesn't have a dedicated security contact.I reached out to them at their generic...
A residential proxy is listed as an "IP address provided by an Internet Service Provider", but I still don't really understand how they get access to them. ISPs have to be selling them access, right?
I help organize my city's spinoff of GiveCamp, called Code for Good (https://codeforgoodwm.org/), and we bring together hundreds of volunteers every year, and help dozens of nonprofits.