Comment on Discord Servers asking for Phone Numbers and 'Verification Levels'

• CosmicCleric@lemmy.world ⁨10⁩ ⁨months⁩ ago

  Verifying that an email is genuine is a much harder ask than you might think.

  Fair enough, but then how is it used today successfully by websites?

  source

  • thoughts3rased@sopuli.xyz ⁨10⁩ ⁨months⁩ ago

    That’s the thing, it’s not. Lots, and I mean lots of sites are plagued by bot activity. The ones hardest hit are the ones that only have email validation.

    I could go to Google and create a new account right now, absolutely free.

    Hell, I could write a script that creates a million for me for barely any money, just paying a CAPTCHA farm a nominal sum to solve the robot tests for me. This is why sites like discord are plagued with advertisement bots, the bar to entry is literally nothing.

    Phone numbers cost money to create, and are in finite supply. Even PAYG (pre paid numbers for you Americans) numbers require you to go outside and purchase a SIM card from a store. They aren’t foolproof, but they stop the vast majority of fake accounts.

    source

    • CosmicCleric@lemmy.world ⁨10⁩ ⁨months⁩ ago

      That’s the thing, it’s not. Lots, and I mean lots of sites are plagued by bot activity. The ones hardest hit are the ones that only have email validation.

      But those other websites that suffer the same kind of issues work successfully without asking for a phone number, just via email verification. I don’t see why Discord should be any different.

      Phone numbers cost money to create, and are in finite supply. Even PAYG (pre paid numbers for you Americans) numbers require you to go outside and purchase a SIM card from a store. They aren’t foolproof, but they stop the vast majority of fake accounts.

      I understand all of those ramifications, and not arguing against it.

      However, it’s moving the onus of dealing with the issue from the website owners to the users who use the website. It causes the users to lose their anonymity, and allows their website usage to be tracked and sold. That’s a step too far.

      source

      • thoughts3rased@sopuli.xyz ⁨10⁩ ⁨months⁩ ago

        How else is the platform owner to prove that the account is linked to an actual person without defeating the check being trivial? They can’t without something being tied to you. An email address may have been a good one to use back when AOL gave out addresses as part of their subscription service, but the availability of free email has destroyed this possibility. Out of the many things that could be asked for you to provide, a phone number is the least nefarious.

        You reserve the right to not give your phone number to Discord. You do not need to give Discord your number in order for you to be able to use it. Likewise, the server owner reserves the right to ask Discord to only allow accounts that have been verified to not be burner accounts. Email verification does not do this, and the time limits on membership only go as far as slowing down accounts used in bad faith in a server, whether that be scams, trolling or otherwise.

        Like many things in life, it’s a trade-off. You value your right to privacy more than being granted access to this particular server. The server owner values the reduced ability of trolls and bad actors over the loss of membership from users like you. Unfortunately you cannot have your cake and eat it too.

        The only alternative I can think of is just buying a pre-paid number and a cheap second hand phone and using that only to verify with services. It’s good for 2FA too as it makes you immune to SIM swap attacks.

        source