Hacker News Reader

Or in my case, a bank that assumes I have mobile phone coverage at home. When I try to order anything on the internet these days it wants to send me a 6 digit SMS code, so now I can't order anything on the internet (although Amazon and Paypal still work, touch wood).

View on HN

Get a Google Voice account and use that number for SMS. Works great over wifi.

I'm trying to reduce any dependence on Google. Nevertheless I just tried it out and it says it's not available in my country.

Skype numbers support this (in some countries), too. I live outside the US but have a US Skype number for this very purpose.

While I like the spirit of this thread of work-around suggestions, I can't help but think that using $RandomService to verify access to someone's bank account is a terrible idea.

It's bad enough having banks rely on a phone system where most carriers are perfectly happy to let anyone who knows your Address, DOB and Mother's Maiden name to port your phone number to a new SIM.

It probably requires less effort (and certainly less risk of discovery) to take over a Skype, Google Voice or other VOIP/SMS service.

It's a terrible idea, but until banks and other websites quit weaponizing 2FA in the name of security theater, workarounds like this are sometimes the only option.

Reply on news.ycombinator.com