Hacker News Reader

Comment by pcthrowaway | Hacker News Reader

I have a google account I haven't been able to log into for some time, because even though I know the password, it flagged "suspicious activity" at some point and has required me to verify with a phone number I no longer have, from when I lived in the U.S. (I now live in Canada, but it did let me log in from Canada when I first moved here)

I was hoping that some day, someone would register that phone number and I'd be able to convince them to give me an authentication code, but it sounds like now the account will be deleted before this happens.

This really sucks because I think that email was used to register with a bitcoin exchange that I may have some (formerly) tiny balance on. So effectively google has locked me out of an account that could have financial consequences, with no way for me to recover it.

View on HN

If the number isn’t in service why not try signing up with some pbx and getting that number shouldn’t cost more than $30. If you truly believe you have some btc locked away there that’s a small price to pay to get it back.

I always figured I'd get access one day, and being unable to sell before then (if I even had BTC there) wouldn't necessarily be a bad thing.

But also, can you register a specific U.S. number as a person in another country? Seems like a lot of hassle and possibly more expensive than $30, if it's even possible.

You can def get a US number, finding someone who will give you a specific one is maybe a little harder but not out of the realm of possibility. Sounds like you don’t really care though.

>and I'd be able to convince them to give me an authentication code

Unless you got to know them well (as in personally face to face), a stranger asking for a 2fa code would appear to be an elaborate phishing campaign.

Not even elaborate. Try selling something in FB market place or craigslist. You will get many interested parties who just need to send you a quick verification code for reasons.

What they are really doing is signing up for stuff using your phone number.

If someone ever asked me to send them a 2fa I would send them the wrong one until they get mad and stop asking me to do it.

Most people honestly don't care.

Also, my name is google-able and some "white pages" style sites still list my old phone number, so I could verify my identity in other ways.

You'd be surprised what people will do if you talk them into it, lots of people wouldn't hesitate to give their own credentials up, they're not going to take issue giving a 2fa code for something they're not in the process of signing into.

This isn't a silicon valley area code or any other area where people are tech-savvy, I'd wager there's a 99% chance that whoever registers the number could be persuaded. I can literally have my family with the same (rare) last name meet them face to face.

Reply on news.ycombinator.com