I still cannot comprehend their logic for why having full SMS integration would be such a disaster. It just makes no sense and I wish they’d admit that it isn’t a security concern but is just that they don’t want to do it. They just don’t want to, and don’t care that this policy makes it harder for users to adopt and use their service.
I know that SMS is a US-specific thing. But at least in the US, most people regularly interact with SMS. Having a platform that supports SMS means you can basically live in that platform – this is a major part of the success of iMessage.
The idea that it would create huge security gaps… I just don’t believe. I think the kind of user who wants to be on Signal clearly understands that SMS is not secure. All they need to do is have a clear visual indication when you are texting instead of using Signal, which isn’t that complex.
Instead, people like me who might try using it as their primary platform just see no point. None of my friends use it. So why should I even have it installed? And none of my friends see a reason to install it because I and everyone else don’t have it installed. If I could use it as my SMS app I might have it installed and lived-in, which greatly lowers that barrier.
Nah bro, you are.
It’s ALSO possible to generate virtual phone numbers for a small cost.
Using a cryptographic PoW is a different small cost.
Either way, it only takes a small cost to prevent mass bot registration.
You’re treating processing power and time as if it is 100% free just because it can be done in a VM. But it doesn’t matter if it is a VM. It is still going to require at least some certain threshold of processor time, and that processor time has a real cost. For the kind of place that can just spin up thousands of VMs and use it to do massive bot registration… they could just be mining bitcoins instead.
It’s not just whether you can do this. It’s how much value it has vs what ELSE you could be doing with the time and energy. A Signal account is already worth vanishingly little as a spam tool, they just need to give it enough of a cost to make it not worthwhile.