Hacker News new | ask | show | jobs
by whypretend 1139 days ago
What about the sim farm I use to delegate my SMS OTP codes to? No VOIP numbers don't work for everything, no using the same SIM card doesn't work, no I don't want to worry about running dozens of phones with batteries and no I'm not even sending messages.

Local TOTP key as a second factor should be more standard.

Especially if I'm already paying for a service you shouldn't need SMS as a crappy veiled proxy for some human verification.

Supposed to pretend like this doesn't just force people to use more phones?

4 comments

So please respond to the consultation. Q2 is literally asking for other uses of multiple SIMs that the policy wonks haven't thought about yet.
You say “no, no, no” as if it is obvious why you’d need to delegate SMS OTP codes to a sim farm.
Many clients are dependent on me to ensure their accounts are safe and backed up - lockouts with no recourse are real. I will not tolerate having a singular SIM card being the point of failure across a client pool, especially due to some nebulous aggressive policy.
Why don’t you want to use the same SIM card? Is it because you don’t want services to be able to correlate usage across multiple services?
I need a reliable way to manage OTP codes for many clients, having one SIM is just not good enough. Partially the same problem because I've run into limits - having a separate card is just less likely to be a problem.
Geniune question - what’s the actual use case here? It can’t be just you personally logging into various services right?
https://smspva.com/

Immensely useful services like this without which for instance people would not be able to scrape social media services at scale.

This service wouldn't be useful to me because the number reputation seems poor. Actual delegation would not rely on pooling numbers for increased user per SIM card. It's one client per SIM card.
Mitigating account lockout risk across lots of clients. Separate SIM for each client, having account lockouts are unacceptable. Yes, I've had problems with no recourse.
If it was?
You're right - It shouldn't matter - having separated accounts makes sense if you're concerned with putting all your eggs in one basket.