Live data from Hacker News

Ask HN: Why are phone numbers considered a secure personal identifier?

news.ycombinator.com

11–20 of 46 posts

Re: Ask HN: Why are phone numbers considered a secure personal identifier?

#11
post #3

Counterpoint: I’ve had the same number for 20 years. In all that time, I’ve had maybe 5 instances where I needed to get a confirmation number and couldn’t get enough reception. It works well enough, the vast majority of the time, for the vast majority of people. You’re an extreme edge case.

Over 1.4 billion people travelled internationally in 2018. You’re making an assumption based on a single data point, just as you imply the author to be. Do you use PayPal? It’s impossible to even login while you are abroad.

> Do you use PayPal? It’s impossible to even login while you are abroad.

Are you sure? I'm in Eastern Europe right now and just logged in and sent money.

Re: Ask HN: Why are phone numbers considered a secure personal identifier?

#12
Nowadays you need to register with photo ID to get a mobile number, it seems like it's an anti-crime as well as anti- (let's say the magic T-word together...) terrorism move to require a phone number. Because if something goes wrong from the authorities' point of view, then they can always subpoena the mobile carrier to get your identity.

AFAIK it's even "illegal" to give a SIM card to a 3rd person with updating this information.

Re: Ask HN: Why are phone numbers considered a secure personal identifier?

#13

Nowadays you need to register with photo ID to get a mobile number, it seems like it's an anti-crime as well as anti- (let's say the magic T-word together...) terrorism move to require a phone number. Because if something goes wrong from the authorities' point of view, then they can always subpoena the mobile carrier to get your identity. AFAIK it's even "illegal" to give a SIM card to a 3rd person with updating this…

> Nowadays you need to register with photo ID to get a mobile number

I just got a new number last week with cash. I bought a pre-paid SIM in Amsterdam. They gave me bonus credit for giving my name and address, but if I didn't want the credit, I wouldn't have had to give them any identifying info at all.

Re: Ask HN: Why are phone numbers considered a secure personal identifier?

#15
post #9
post #7

Earlier quoted context omitted.

You are an immigrant, not an expat.

I suspect you're trying to fight the "white people are expats brown people are immigrants" stereotype, which is noble. But there is a good argument to be made that Americans are unique in the sense that we are still taxed by America when we leave, so we need a word that describes Americans living abroad.

I didn't realize that Americans were the only people that were called expats?

Re: Ask HN: Why are phone numbers considered a secure personal identifier?

#16
post #11

Earlier quoted context omitted.

Over 1.4 billion people travelled internationally in 2018. You’re making an assumption based on a single data point, just as you imply the author to be. Do you use PayPal? It’s impossible to even login while you are abroad.

> Do you use PayPal? It’s impossible to even login while you are abroad. Are you sure? I'm in Eastern Europe right now and just logged in and sent money.

I was about to say, I've had no problems with PayPal after I moved to Serbia. Venmo on the other hand...

Re: Ask HN: Why are phone numbers considered a secure personal identifier?

#17
post #10

No - it is not a secure personal identifier (in many countries). According to Australian laws, someone can port your mobile number to his/her sim card by filing an online form, as long as they know your date of birth and account number, that person can take your phone number away in minutes. Nothing need to be done in person, no ID will be asked. In fact, the laws are made to explicitly forbid such checks under the n…

Is the port done immediately or do you have something like 24+h between receiving the port notification and it becoming active to reverse the process and/or login to your accounts and activate Google Auth?

Re: Ask HN: Why are phone numbers considered a secure personal identifier?

#18
Well, what else are you going to use for a secure personal identifier? Email? Credit card? Neither of those are especially more secure, and it's at least slightly harder to get a new phone number (and much harder to get a specific phone number) than an email address. This raises the cost of spam slightly.

Systems which actually need to secure a large amount of digital valuables or face customer complaints (i.e. games) get their customers to use hardware tokens or mobile-based 2FA.

Re: Ask HN: Why are phone numbers considered a secure personal identifier?

#19
post #9

Earlier quoted context omitted.

I suspect you're trying to fight the "white people are expats brown people are immigrants" stereotype, which is noble. But there is a good argument to be made that Americans are unique in the sense that we are still taxed by America when we leave, so we need a word that describes Americans living abroad.

I didn't realize that Americans were the only people that were called expats?

They aren’t. This thread is weird.

Re: Ask HN: Why are phone numbers considered a secure personal identifier?

#20
> I have debated using Twilio to create my own number pool of international numbers and a way to check my messages via a web portal instead of relying on messaging. Are there any current apps / services that already do this effectively?

I had the same idea and have been using Twillio to forward SMS / Voice to my phone. The idea being that a Twillio number should be harder for an attacker to port.

There are a few issues with that approach:

* SMS are only received if they come from the same country as the phone number.

* SMS issued by my bank not arriving. Maybe related to the first issue.

* Voice calls take a few more rings before they are passed through, meaning that calls are more likely to get dropped by the caller.

Other than that it works beautifully.

Post reply on HN