Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Now, if I could pay $20 (or even $50 or $100) cash, to get a SIM card/telephone # that i could use solely for 2FA, and that number would never expire, and my balance would never expire, and it could in no way be traced to me - because I paid cash - then I might consider getting something like that.
payg = pay as you go. If you didn't know that, then I guess it's not something available where you live. That's a pity as in the UK one can get a SIM for free (e.g. from the network provider "Three"), put £10 credit on it and as long as you use it every few months (e.g. send a text message) it won't expire.

As for the security risks in using sms for 2FA ... for a Twitter account it wouldn't bother me. Even some banks use it, although that does make me a bit nervous.
 
  • Like
Reactions: Scepticalscribe
2 factor authentication via SMS is not secure. Twitter offers the option to use an authenticator application to set up 2-factor, so use that instead.
Twitter’s instructions detail how to use an authenticator app: https://help.twitter.com/en/managing-your-account/two-factor-authentication

If I can get Twitter to unlock my account, and I turned this on, then would that solve my problem?

Like I was saying earlier... I was lamenting to my domain provider about what a PITA this whole "you need a mobile phone" issue was, and as we talked he said that I should be able to use something like Google authenticator (?) and install the app on my SIMless iPhone, and then connect to the Internet using WiFi, and then use the app to do 2FA and I'd be good.

What do you think?
[automerge]1590710074[/automerge]
No, just seems pretty rare to find a person who wants to use Twitter and doesn’t have cell phone service at all.

I guess.


No, there is no way. If you don’t pay for cell service then you won’t get an SMS through the cell networks. The poster above was just saying that their iPhone works over WiFi now but they need to pay for service still. It’s called WiFi calling, it lets phone users have service nearly anywhere they can have internet.

Bummer.


I don’t use Twitter but I think they may send codes if you ever sign into a new unrecognized device or browser, so someone else’s phone may work as long as they’re someone you know and trust and they’ll be around, as long as you want to continue to be without cell service while using Twitter.

And that is a problem that I have and that isn't going to change...
 
Thinking about it, if you can get the account set up initially, and if you can set up the authentication app, then maybe you could use it without regular phone service? But the authentication app is probably on Android or iOS so you’ll need one of those, but it wouldn’t need phone service (you can even use an iPhone without phone service, or alternatively an iPad or iPod Touch). Not sure if they will pull an account check or something on you down the road and only allow you to use it after authenticating with SMS.
 
Are you in the US? Why not grab a free Google Voice number to receive texts on? You can grab the Voice app from the app store on your iPhone.
 
I don't have a landline.

What is "payg sim"??

Fwiw... In addition to being concerned about being tracked everywhere I go with a mobile device, and the fact that most people pay thousands of $$$ each year for the "privilege" of having a mobile plan, there is also the issue of having to cough up as much information to get an AT&T/Verizon account as to open a bank account or get a U.S. Passport that totally turns me off from going mobile.

Now, if I could pay $20 (or even $50 or $100) cash, to get a SIM card/telephone # that i could use solely for 2FA, and that number would never expire, and my balance would never expire, and it could in no way be traced to me - because I paid cash - then I might consider getting something like that.

Of course, then there is the fear that I'd lose my SIM card or m iPhone and then I'd be f because I have no way to prove my identity. (If the dumb *sses as Twitter would let me use my REAL VOIP telephone number, then i would never lose that, and they could ALWAYS identify me as the owner of my account. What a horribly INFLEXIBLE authentication system?!)

I have no idea if you can pay cash but what about Tracfone: https://www.tracfone.com/ I'd imagine you could probably buy top-off cards with cash at a Walmart or Target, and you could use any **** phone to get SMS that way. There's a ton of ways to get a phone prepaid that barely costs anything if you only need the occasional voice and sms.
 
Are you in the US? Why not grab a free Google Voice number to receive texts on? You can grab the Voice app from the app store on your iPhone.

That doesn't help him. Google Voice is also a VOIP provider that can be blocked from shortcodes. In addition, you need a mobile number to use Google Voice anyway. They ask for a number and send a verification SMS to it just as well.
 
  • Like
Reactions: Ambrosia7177
Are you in the US? Why not grab a free Google Voice number to receive texts on? You can grab the Voice app from the app store on your iPhone.

Yes, I'm in the U.S.

I thought someone earlier said that a free Google Voice account wouldn't work receiving texts? (Or maybe I read that somewhee online...)
[automerge]1590766764[/automerge]
I have no idea if you can pay cash but what about Tracfone: https://www.tracfone.com/ I'd imagine you could probably buy top-off cards with cash at a Walmart or Target, and you could use any **** phone to get SMS that way. There's a ton of ways to get a phone prepaid that barely costs anything if you only need the occasional voice and sms.

Can anyone else verify this?

What exactly do ou need to buy a "burner phone"?

(When I asked someone this question like 8 years ago, they said you needed to show ID, pay with a credit card, etc so it was almost like applying for a regular cellular account, except at least you didn't have to gve your SSN.)

And even if I could get a burner phone eaily and for not a lot of money, I am also concerned about what telephone # I would get. (I am out of state now for work, and so I'd hate to get a "local" telephone # in a state that I don't live.)

Of course I think a larger question to ask, is whether I just need a "real" telephone # to receive a text message ONCE, or if this is going to be an ongoing issue when I change Macs or browsers, or my VPN IP changes.

Even with a burner phone, it's scary to me to have to lug around this phone - that isn't even a real phone to me - and ensure that I always have it with me when I travel, and that it never gets lost or stolen or else I am locked out of my twitter account for good. And that would be an issue, because I got lucky enought to get my *exact* trademarked name for my Twitter handle - even though I didn't try and sign up for Twitter until like 8 years after the fact?!
 
Last edited by a moderator:
I don't know why you're worried about being tracked. Just leave the cell phone at home (or in the office). You've been living without a mobile phone all these years, so just treat the mobile as if it was not mobile. Power it off when you don't need it. No power = no tracking. I have to assume that you're not so far off the grid that the government doesn't already know where you live.

You're expending all this energy to obtain a Twitter account that you consider to be a business necessity. There is such a thing as "cost of doing business." Forget about how much you save by not having a mobile/landline - consider how much more you may earn by having one. If the numbers don't add up, then by all means, forget about that Twitter account. But if it'll be profitable (even if it would be more profitable if you didn't have to pay for that phone service), then don't worry about the money.

Regardless of how difficult wireless phone reception can be for people in rural areas, on a worldwide basis wireless is far more universal than land lines because running wires to remote/economically-disadvantaged places is much more expensive. In the First World, society's interests in extending phone service to remote areas long pre-dated the existence of cellular technology - wires were run everywhere, with subsidies or full underwriting by governments. In large parts of the Third World, universal telephone service was not practical until cellular came along. With cellular comes SMS, which is why organizations like Twitter adopt SMS-based verification methods.

From a security standpoint... As a cellular phone number is unique to a single piece of equipment, physical access to that phone number is a highly-reliable method of validating identity. By comparison, personal information/passwords/answers to security questions, etc., once obtained, can be shared, sold, and otherwise distributed widely.

Do not use a "burner" - For identity validation purposes, you want to maintain control of that phone number. People who change their cellular numbers when they switch to another phone provider often have a mess of problems switching all the accounts and services that depend on phone numbers for ID validation from the old number to the new. Further, phone numbers are re-used, so if you relinquish a number, some years down the line someone else will have it.

Organizations like Twitter have a vested interest in reaching as many users as possible, but they are under no obligation to reach every person who wants to use the service. It's a business, and just as you don't want to pay for a landline/cell service, they are justified in deciding just how much expense they will incur in order to reach every single person on Earth.
 
Last edited:
Yes, I'm in the U.S.

I thought someone earlier said that a free Google Voice account wouldn't work receiving texts? (Or maybe I read that somewhee online...)
[automerge]1590766764[/automerge]


Can anyone else verify this?

What exactly do ou need to buy a "burner phone"?

(When I asked someone this question like 8 years ago, they said you needed to show ID, pay with a credit card, etc so it was almost like applying for a regular cellular account, except at least you didn't have to gve your SSN.)

And even if I could get a burner phone eaily and for not a lot of money, I am also concerned about what telephone # I would get. (I am out of state now for work, and so I'd hate to get a "local" telephone # in a state that I don't live.)

Of course I think a larger question to ask, is whether I just need a "real" telephone # to receive a text message ONCE, or if this is going to be an ongoing issue when I change Macs or browsers, or my VPN IP changes.

Even with a burner phone, it's scary to me to have to lug around this phone - that isn't even a real phone to me - and ensure that I always have it with me when I travel, and that it never gets lost or stolen or else I am locked out of my twitter account for good. And that would be an issue, because I got lucky enought to get my *exact* trademarked name for my Twitter handle - even though I didn't try and sign up for Twitter until like 8 years after the fact?!

You will need a number you keep. Just in case they ever need to verify again. As that is another world of mess if they want two step and your number is no longer valid.

I know you can get pay as you go phones for cash at walmart. I got one once. They didn't ask for any of my info. Just paid cash and left. You have to be careful which one you choose. As many are prepaid plans (ie monthly and want your info). You specifically need it to be one where you just pay for x number of texts/minutes. They typically expire after a year. These usually cost more for minutes/text since they last so long.

There is also the wifi option. There are a number of burner number of apps on Android which use wifi. Where you get a number for calls and texts. Although I think all require a monthly fee if you want a number to keep. Otherwise the number is only good for a few days or weeks until you get a new random number. Burner apps are useful for sites like Craigslist. So, you can give out your burner number. Sell your item. Then get rid of the number to avoid spammers.

I've used Talkatone. Although my phone has service. I only tried the free version once. As far as I can tell. It doesn't require you to have a working phone service. You just need WiFi. The paid version where numbers don't expire is $3.99 a month. It's available for iOS and Android. Conceivably you could run an Android emulator on your computer, install Talkatone or similar and give it a try.
 
  • Like
Reactions: Scepticalscribe
With cellular comes SMS, which is why organizations like Twitter adopt SMS-based verification methods.

There's no technical reason why landline and VoIP services cannot implement SMS, and indeed many do. (Landline via a web interface, ISDN, or forwarding) Further, as pointed out, you can use voice-delivered codes instead of SMS.

The issue is that VoIP providers can run at such a low cost, that there's free/burner number services out there that can be used for spam and bots. Therefore, services often specifically determine the type of provider and block VoIP services. They require a real mobile phone because it's relatively expensive to get a real mobile number.

The point here isn't that Twitter is doing this to prevent accounts from being hacked, it's to prevent spam and bots from signing up for an account. Otherwise, Twitter supports U2F keys and TOTP generators.
 
  • Like
Reactions: Scepticalscribe
I don't know why you're worried about being tracked. Just leave the cell phone at home (or in the office). You've been living without a mobile phone all these years, so just treat the mobile as if it was not mobile. Power it off when you don't need it. No power = no tracking.

Mostly true, except if I am in Dallas and I need it to set up a Twitter account, then they know I'm in Dallas, and then when I travel to Chicago on business and I need to set up another account, they will know I'm in Chicago.

(It is amazing the effort it take to stay out of the microscope's eye!)


I have to assume that you're not so far off the grid that the government doesn't already know where you live.

If it weren't for my credit card use, I'm not sure anyone would really know where I am...


You're expending all this energy to obtain a Twitter account that you consider to be a business necessity. There is such a thing as "cost of doing business." Forget about how much you save by not having a mobile/landline - consider how much more you may earn by having one. If the numbers don't add up, then by all means, forget about that Twitter account. But if it'll be profitable (even if it would be more profitable if you didn't have to pay for that phone service), then don't worry about the money.

Very true. And my fretting about costs show that I am not a "real" business yet.


With cellular comes SMS, which is why organizations like Twitter adopt SMS-based verification methods.

Good solutions are flexible. It would be nice if they'd give people a 2nd way to authenticate (e.g. voice code) like Google does for 2FA. Obviously Twitter isn't losing sleep over this, but justs aying...


From a security standpoint... As a cellular phone number is unique to a single piece of equipment, physical access to that phone number is a highly-reliable method of validating identity. By comparison, personal information/passwords/answers to security questions, etc., once obtained, can be shared, sold, and otherwise distributed widely.

But my VOIP is unique to me as well. So is my trademark. My EIN. My business filing. Etc.

Maybe scammers often use VOIP. But a scammer won't have the other credentials that I do have to back them up. So why not give me credit for that?

Apparently Twitter will trust a burner phone paid with cash - still untested on my part - but they won't trust an incorporated and lisetd business. How "secure" is that?


Do not use a "burner" - For identity validation purposes, you want to maintain control of that phone number. People who change their cellular numbers when they switch to another phone provider often have a mess of problems switching all the accounts and services that depend on phone numbers for ID validation from the old number to the new. Further, phone numbers are re-used, so if you relinquish a number, some years down the line someone else will have it.

I actually spent the afternoon researching this. Thought I had the perfect find, until the sales kid said in the final moments, "Oh, no, that price is PER MONTH..."

But later I did find a place where I can get a phone # for $40/year but the catch there is that you have to wait until the 3-month plan expires before you can renew, and if you want anonymity, you'd have to buy the plan in a store, and their nearest store to me is like 250 miles away. So that isn't practical in my case.

To your earlier point, time is money...


Organizations like Twitter have a vested interest in reaching as many users as possible, but they are under no obligation to reach every person who wants to use the service. It's a business, and just as you don't want to pay for a landline/cell service, they are justified in deciding just how much expense they will incur in order to reach every single person on Earth.

And that certainly applies in my case!
 
You will need a number you keep. Just in case they ever need to verify again. As that is another world of mess if they want two step and your number is no longer valid.

Yes, I agree.


I know you can get pay as you go phones for cash at walmart. I got one once. They didn't ask for any of my info. Just paid cash and left. You have to be careful which one you choose. As many are prepaid plans (ie monthly and want your info). You specifically need it to be one where you just pay for x number of texts/minutes. They typically expire after a year. These usually cost more for minutes/text since they last so long.

While grocery shopping this afternoon, I talked with a kid about this at Walmart. I was ready to pull the trigger when he announced the price he gave me wasn't a balance, but a monthly change - that changed everything.

I don't think companies want to tie up a tele # for years on end for under $100, so I'm not sure prepaid accounts exist.


There is also the wifi option. There are a number of burner number of apps on Android which use wifi. Where you get a number for calls and texts. Although I think all require a monthly fee if you want a number to keep. Otherwise the number is only good for a few days or weeks until you get a new random number. Burner apps are useful for sites like Craigslist. So, you can give out your burner number. Sell your item. Then get rid of the number to avoid spammers.

Nah, that's not the route I wanna go...


I've used Talkatone. Although my phone has service. I only tried the free version once. As far as I can tell. It doesn't require you to have a working phone service. You just need WiFi. The paid version where numbers don't expire is $3.99 a month. It's available for iOS and Android. Conceivably you could run an Android emulator on your computer, install Talkatone or similar and give it a try.

If I have to pay a monthly fee it isn't worth it.

It will be interesting to see if Twitter unlocks my account next week, and if they do, how long it will stay unlocked without a textable tele # associated with it.

I have mixed feelings about all of this at this point... :(
 
@konqerror,

There's no technical reason why landline and VoIP services cannot implement SMS, and indeed many do. (Landline via a web interface, ISDN, or forwarding)

Well, apparently that is one downside of the VOIP provider that I use.


Further, as pointed out, you can use voice-delivered codes instead of SMS.

I could use voice-delivered codes IF Twitter offered them, which they do not...


The issue is that VoIP providers can run at such a low cost, that there's free/burner number services out there that can be used for spam and bots. Therefore, services often specifically determine the type of provider and block VoIP services. They require a real mobile phone because it's relatively expensive to get a real mobile number.

Yeah, now I know that. (Another downside of VOIP I guess...)


The point here isn't that Twitter is doing this to prevent accounts from being hacked, it's to prevent spam and bots from signing up for an account. Otherwise, Twitter supports U2F keys and TOTP generators.

Please see my question in post #28, which I have asked a few times but no one responded to...

If I can get my account unlocked, and then I start using a password generator like from Google, will that be enough for me to not have a telephone # on file?

Once my account is unlocked, I could install a password generator app on my iPhone, and access it using WiFi and then that would show things are tied to my iPhone and a person, although they still wouldn't have my mobile # - which of course I do not have!

Thoughts?
 
If I can get my account unlocked, and then I start using a password generator like from Google, will that be enough for me to not have a telephone # on file?

Twitter's anti-bot algorithms are going to be confidential, so nobody can tell you. In any case, they probably are based on complex scoring algorithms/machine learning so even then it would be hard to predict.
 
Mostly true, except if I am in Dallas and I need it to set up a Twitter account, then they know I'm in Dallas, and then when I travel to Chicago on business and I need to set up another account, they will know I'm in Chicago.
Twitter will know this anyway, as they'll track the IP address range you're using to access their service. They'll also have a list of the (common) addresses used by most VPNs.

I've not read all the posts above, so maybe you either can't use G Voice, or the info below is out-dated, but: https://medium.com/@circleboom/how-to-unlock-twitter-account-without-phone-number-8a7261bda300
 
Sense you are in the US you can get cash cards at most stores, heck even some supermarkets carry them too! This what you use gift card on sites that only except a card without them getting access to account!
 
But my VOIP is unique to me as well. So is my trademark. My EIN. My business filing. Etc.

Maybe scammers often use VOIP. But a scammer won't have the other credentials that I do have to back them up. So why not give me credit for that?
All those other "unique" items can be known and used by someone else. That's what identity theft is all about. Trademarks and business filings are on the public record, EINs and Social Security numbers are used so widely for identity validation that just about anyone with the slightest interest in knowing yours can obtain it. What would a trademark filing prove? You would still have to prove that you are the John Smith named as the trademark owner. Even a VoIP subscriber's "unique endpoint" can be masked and relayed anywhere in the world.

And what mechanisms would Twitter have to put in place in order to evaluate your "proofs" of identity? Would they require you to present them to a clerk at a local Twitter business office? No, it'd be a web form that could be populated with anybody's stolen info, because Twitter's low-revenue-per-user business model demands automated processing of all transactions.

Twitter isn't all that interested in knowing the true identity of a subscriber - they're looking for "reasonable assurance of individuality" rather than "proof of identity." Sending an SMS message to a VoIP address provides no such assurance - it's just Twitter's computers vs. the spammers' computers.

And SMS messaging is at the core of Twitter's existence - a method of group communication using the already-extant SMS system. Is it any wonder their validation methods are tied to the ability to receive an SMS message? VoIP blocking is a defensive measure, adopted to reject the spammers who inevitably arrive after such a platform is built.
 
  • Like
Reactions: Ambrosia7177
@ApfelKuchen,

They could offer an alternative authentication choice, like Google, and call my tele # and give me a voice code that I in turn could enter into their form...

Well, I *thought* I had a solution on Friday...

I have an AT&T hotspot, which has a SIM card in it, and I know that AT&T texts me every month when I pay by phone, so I called AT&T on Friday and explained my predicament, and I asked the guy in the Philippines if I could get an SMS via my hotspot.

The CS rep sent me a test and I got it, so I thought that might be the solution.

Well, I was just ready to send my first ever text message, and even though Twitter unlocked my account yesterday, when I went to send my first "tweet", I got another message asking for a telephone #.

So I entered in my hotspot's tele #, but sadly got no text message... 😢

Looks like I am F...
 
Hello everyone.

Well, my social media/Twitter project got tabled for the last month because of the brick walls I ran into above.

Today I am thinking of pulling the trigger and actually getting a SIM card for my iPhone - which I ony use as a camera.

Before moving forward, I have a question for all of you...

Do you think that once I have a "real" telephone # on my iPhone using a SIM card, that I will be able to use that to once again unlock my newly created - but never used - Twitter account? Or, because I didn't set up my Twitter account with this possible new mobile #, did I miss my "window of opportunity"?

The last thing I need is to pay a boatload of money to AT&T, get a mobile plan, and then find out I am still screwed with Twitter?!

Thoughts?
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.