It's a phone number, not your bank account.
It's public information.
Do you want to sue the phone telcos for publishing the phone book?
It's public information.
Do you want to sue the phone telcos for publishing the phone book?
I might call you and check- and check for VOIP numbers, too, so no fakes.
Ah yes, continuing the fiction that anyone who uses a VoIP service must be a fraudster with a faked phone number.
Just another in the long list of if you are not using Google or Microsoft e-mail and AT&T or Verizon or T-Mobile or Sprint postpaid mobile phone service, you're obviously up to no good and deserve whatever "anti-fraud" you get.
No, it isn't.
Is it?
If I find out your phone number, "stuff4ben", then I know who "stuff4ben" really is.
People have been missing this for a LONG time now. Phone numbers are the unique identifier, especially with portability.
You can use 50 different usernames across 50 different sites but with that phone number, I know they are all you.
Which I can then link up to the 1,000 other sites you use those 50 usernames on without providing your phone number, and it's still likely you.
The NSA's database must be very interesting out at the Utah Data Center. This is how it all works, because you can mask your IP address using Tor but you can't mask any of that unless you've taken very careful steps along the entire history of your internet usage, from the start.
I have a pretty unique name, you can search my first name + "voter registration" and get my address, phone number, and birthdate
Even if my name was common, it'd still be out there
Besides, weren’t the people who had opted out from the “Let people who have your phone number find you on Twitter” unaffected by this?
A lot of people are not aware of the fact this information is all public
Two-factor authentication is a dumb solution to a real problem. The problem should be properly solved, rather than hacked around with stupid solutions like "sending notifications to accounts that can easily be spoofed by willful actors".
SMS Two-factor authentication is a dumb solution. Actual two-factor authentication like FIDO U2F tokens is a better solution. Even TOTP is better than SMS auth.
BTW, you bank account number is the same way if you write checks.
So they're not private in the way that some data (like health information) that you're only going to share very selectively is private. But it's mostly not public in the sense that you'll likely put it online unless maybe it's a business phone.
You wouldn't type your number into a HN comment, would you? Probably not because you know exactly what would happen.
It's playing on words until you find out the PII definition isn't the one that's used to settle GDPR claims.
Parent post insisted on the acronym, that triggered my consistency response reflex.