• Poutinetown@lemmy.ca
    link
    fedilink
    English
    arrow-up
    50
    ·
    1 year ago

    The cost of these registration services for verifying phone numbers when people first install Signal, or when they re-register on a new device, currently averages around $6 million dollars per year.

    That’s pretty crazy. Wonder which third party providers they are using. Maybe the identity verification methods we have today is due for some significant changes?

    • verysoft@kbin.social
      link
      fedilink
      arrow-up
      43
      ·
      1 year ago

      Yeah, I wasn’t expecting that to be the bulk of their spending. Maybe they should remove the need for phone numbers now they removed SMS.

      • Poutinetown@lemmy.ca
        link
        fedilink
        English
        arrow-up
        18
        arrow-down
        2
        ·
        1 year ago

        SMS is dead, so they will need to move on eventually. Most carriers are moving towards high data plans now. I mainly use it for verification, although I’d rather use more secure methods.

        • u_tamtam@programming.devOP
          link
          fedilink
          English
          arrow-up
          9
          arrow-down
          1
          ·
          1 year ago

          Well, if SMS is dead then RCS is what we get instead, and there’s no difference to us (and probably higher costs for Signal & al.)

          And there are wayyyy too many things that depend on SMS for it to be dead any time soon, too :)

        • u_tamtam@programming.devOP
          link
          fedilink
          English
          arrow-up
          5
          ·
          1 year ago

          No, I think they are merely working on user ids no longer mandating to be your phone number (so that it can be pseudonymous, e.g. tja@signal instead of +xx0123456@signal), I don’t believe they hope to drop SMS verification at this point because of the spam issue getting worse otherwise

    • u_tamtam@programming.devOP
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      1
      ·
      1 year ago

      Without SMS verification, spam would be so much worse that they’ve been kind of obliged to keep it, even though it defeats/undoes most of the privacy features they like to advertise about

      • Poutinetown@lemmy.ca
        link
        fedilink
        English
        arrow-up
        13
        arrow-down
        1
        ·
        1 year ago

        The article says it’s to limit spam. I don’t feel platforms like Lemmy (or the other platform) are particularly spammy though. On the other hand I get a lot more spam on Whatsapp, even though it’s phone number bound.

        Signal is pretty good in terms of limited spam, but I’m curious about the impact if they A/B test the removal and see how much spam would arise. Obviously that could only be implemented after they remove the need to add contact via phone number.

        • Balder@lemmy.world
          link
          fedilink
          English
          arrow-up
          21
          ·
          1 year ago

          If more people joined Lemmy you’d see the amount of spam this place would get. Now it’s only a bunch of nerds who will quickly report any spammy activity. It’s a small “friendly” community for now.

        • huginn@feddit.it
          link
          fedilink
          English
          arrow-up
          14
          ·
          1 year ago

          Niche communities don’t deal with spam.

          But the moment it’s big enough Lemmy will be rife with spammers and you’ll need full time moderation tools.

        • Linkerbaan@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          arrow-down
          2
          ·
          1 year ago

          If you go to Reddit which is more popular for bots certain subs are completely filled with spam and votebots. r/worldnews is like a giant circle of pro IDF bots jerking eachother off. LSF became a shitshow too.

        • skillissuer@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          plenty of instances have email verification and or captcha, and those that don’t get defederated (sometimes) (this already happened)