Live data from Hacker News

Ask HN: Twilio suspended account because someone sent us a fraud text

news.ycombinator.com

201–207 of 207 posts

Re: Ask HN: Twilio suspended account because someone sent us a fraud text

#201

Earlier quoted context omitted.

That's a distinction without a difference. By their own policy, Twilio's upstream should ban them for "forwarding spam". I'm guessing they would not be happy if that policy were applied.

You are really good at explaining these things. Very often people say things that I know are incorrect and actually sound quite stupid, but then I am unable to articulate why. I was very surprised at the number of incorrect negative responses from people to this post, who seemed to grab onto details and then use them to twist reality. How did you learn to dissect these arguments and then clearly refute them? Also, I…

Did your application not send out the spam texts? What are you even saying?

Re: Ask HN: Twilio suspended account because someone sent us a fraud text

#202

Earlier quoted context omitted.

Yeah, we pass all of our twilio messages to our staff via a special Slack channel.

Which pricing tier do you use? I've been thinking of starting with the for a while. Now we use a hodgepodge of Skype and WhatsApp

No post body was provided.

Re: Ask HN: Twilio suspended account because someone sent us a fraud text

#204
post #178

Earlier quoted context omitted.

It’s definitely not analogous to an open mail relay in the slightest. The whole point of an open mail relay is the 3rd party can send their crap through your servers to anyone they want to target. This scenario gives the spammer no control over who gets the message. Twilio is being used as a message bus, and OP is simply trying to save the work of writing an app or a new UI on the employee’s phone to read a list of m…

Um, the twilio customer can be the spammer. They can send messages to anyone they want to target. Twilio IS running what is effectively an open rely. To the degree twilio's business model depends on allowing its customers to send to whomever they want (which I assert it does), they CAN NOT let those customers send spam - full stop - end of discussion. If you don't understand why this is critical to twilio - I don't k…

An open relay is different from what you describe. My email account is not an open relay just because I can spam whomever I want from it, and neither is my twilio account.

And I don't need to send sms spam. If it was blocked on the way out, that'd be fine.

Re: Ask HN: Twilio suspended account because someone sent us a fraud text

#205
post #88

Earlier quoted context omitted.

Yeah this sounds highly problematic. Maybe in the meantime you can text links to your own portal instead. I.e. "New SMS received from +123... . Read it at: https://your-internal-infrastructure.com/sms/[GUID] " (maybe with a simple login so Twilio auto-fetch, if any, gets a benign page). That way there is no spammer-controlled message content (apart from the phone #) in the message you send. Or convert them to jpeg an…

Yes, these are very good ideas. Didn't even think of the JPEG one, very cool!

At a high enough volume, links will also get you blocked by carriers

Re: Ask HN: Twilio suspended account because someone sent us a fraud text

#206
post #46
post #6

Earlier quoted context omitted.

They were also a nightmare for us. We had to find another provider.

Could you recommand one that provies SIP trunking and number porting?

Check with Sinch and Infobip.

Re: Ask HN: Twilio suspended account because someone sent us a fraud text

#207

Earlier quoted context omitted.

Yeah, we pass all of our twilio messages to our staff via a special Slack channel.

Which pricing tier do you use? I've been thinking of starting with the for a while. Now we use a hodgepodge of Skype and WhatsApp

For which, Slack or Twilio? We have a basic twilio account, paying $1/mo for the phone number, and $0.1/msg or whatever it is.

On Slack, we have a paid account at the standard level, we've had that for years.

One note, both Google and Apple detect that our number is Twilio, and won't let us use it for 2FA, sadly (our original use case).

Post reply on HN