textnow ramping up security

[robbyrobby]

https://www.textnow.com/blog/textnow...a-safe-service

among other thing no more signups from the web browser, only from the mobile apps, blocking any access via VPN and removing from app stores outside north america

they also are claiming to be working very closely with law enforcement

[hapollo8]

Sounds like stuff they should've been doing all along. With convenience and ease of which one can get a number in minutes to make calls, bad actors always arise.

Just hope it doesn't really impact true user caught in the algorithms dragnet

Probably also why so many VOIP (non real mobile) numbers are still having problems with 2FA.

[robbyrobby]

one part that is interesting is they will be:

'Blocking the option to access or create new accounts on a device that previously had been flagged for abuse (meant to stop perpetrators who attempt to use the same device again and again).'

i wonder how they actually identify the device and its a signal apps of all sorts may know a lot more about us than we know they do, especially if they are able to block devices that are factory reset and setup with new google/apple accounts from being used.

all these measures may not actually do much since APKs are likely to be floating around for side loading or even use in emulators such as bluestacks

and 'blocking VPNs' means blocking know VPNs, always possible to find ways around that part.

[hapollo8]

always possible to find ways around that part.

those who feel the time and money is worth it will find ways around as it's always a game of cat and mouse; decreases fraud temporarily until a way is found around their measures. sorta of like whack a mole.

I still worry, legitimate users may be caught in between.

like all other free products, you and your privacy is the method of payment.

[Yeswap]

one part that is interesting is they will be:

'Blocking the option to access or create new accounts on a device that previously had been flagged for abuse (meant to stop perpetrators who attempt to use the same device again and again).'

i wonder how they actually identify the device and its a signal apps of all sorts may know a lot more about us than we know they do, especially if they are able to block devices that are factory reset and setup with new google/apple accounts from being used...

Prior to Android 10 all apps could read unique iDs like IMEI. Android 10 blocked non-sytem apps from reading non-resetable IDs so the adtech industry now uses device fingerprinting to try to uniquely indentiy users.

According to the excellent App Manager app from Fdroid, the TextNow app contains 59 tracking libraries and has access to a humongous amount of hardware features and personal information. I suspect that the app does a pretty good job of fingerprinting devices and users for advertising and fraud protection purposes.

[brad4cell]

All social website scammers that use a phone number use VoIP phone numbers like TextNow so they can hide their real location and identity.

However, I would guess the scammers would use something different from TextNow but not sure what they use.

Scammers also like to use WhatsApp and similar apps that expose a phone number and I would guess they tie a VoIP number to WhatsApp so they can hide their identity.

It seems scammers never have problems creating new accounts but the security measures often lock out real users that did nothing wrong.

I get a lot of scammers online so it is interesting to know what they are doing but I don't have much time to really know all the tricks they use and security issues.

I don't like device fingerprinting because it allows them to track you so bad for privacy.

[sillyette]

I like TextNow because of their free service model. They used to give free TextNow numbers on the computer. Those were really convenient to use and I know many people who signed up for TextNow with those numbers. I think they stopped giving those computer-only numbers many months ago.

[robbyrobby]

I like TextNow because of their free service model. They used to give free TextNow numbers on the computer. Those were really convenient to use and I know many people who signed up for TextNow with those numbers. I think they stopped giving those computer-only numbers many months ago.

as long as you do the initial signup from a phone using the app there is no reason why it can't be used computer only after

[brg]

My TextNow service stopped working a month or two ago. Not an issue; it's just something I tinker with. But I "opened a ticket" anyway to see if the service could be resurrected.

Support responded soon enough and asked if I was using a VPN. Huh. I do have one, and do use it infrequently, and apparently I used TextNow via a PC web interface once while my PC VPN was active. *BOOM*

They restored my service, but only after I provided screenshots of my actual home IP. So if nothing else, TN can detect VPN usage, and/or cross-checks user activity against a list of known VPN IPs.

[PaulCrawhorne]

Yes this is known for TextNow.

Only use VPNs for specific sites / services, especially financial providers will ban you for that

[Zipy]

So…. I now have to turn off my Nord VPN every time I want to use TextNow? ��

[brg]

So…. I now have to turn off my Nord VPN every time I want to use TextNow? ��

Based on my experience: yup. At least if you are using TextNow via a network that Nord VPN is active on...

[Zipy]

“Pause” on Nord doesn’t even work. Had to turn it off AND do a phone restart before I could use TextNow.

[PaulCrawhorne]

My VPNing is done via a little GL.iNet travel router set up to pass all traffic through Mullvad via Wireguard.

When I or anyone around have something to do that requires VPN we just switch the device concerned to that WiFi SSID.

Once that operation is complete switch back to the normal network in that location without any encryption.

Both APs / SSIDs may very well be fed by the same internet connection upstream.

No one is trying to use VPN full time, that would result in getting banned by dozens of websites / apps / services we rely on daily.

Only use any VPN for specific use cases (websites / apps / services) that warrant it.

[RFK]

Today I tried to register new TextNow account.

Created login/password, tried to login and got "Account suspended for violation TOS".

No VPN (Verizon FIOS network), I am located within 50 US states, but my account was suspended on the spot.

I tried another phone (and another email) and got suspension too.

I filed an appeal, let's see what will be the final result.