privacyguides.org icon indicating copy to clipboard operation
privacyguides.org copied to clipboard

update!: Add Phone Service Providers

Open jonaharagon opened this issue 1 year ago • 21 comments

Changes proposed in this PR:

  • Adds phone number provider page
  • Replaces duplicate images with symlinks

Closes: #2009

To-do list:

  • [x] Criteria
  • [ ] JMP.chat logo
  • [x] MySudo logo
  • [ ] Hushed logo
  • [ ] Cheogram logo
  • [ ] VOIPSuite logo
  • [ ] Silent Link Logo
  • [ ] PGPP Logo
  • [x] I have disclosed any relevant conflicts of interest in my post.
  • [x] I agree to grant Privacy Guides a perpetual, worldwide, non-exclusive, transferable, royalty-free, irrevocable license with the right to sublicense such rights through multiple tiers of sublicensees, to reproduce, modify, display, perform, relicense, and distribute my contribution as part of this project.
  • [x] I am the sole author of this work.
  • [x] I agree to the Community Code of Conduct.

jonaharagon avatar Mar 22 '23 15:03 jonaharagon

Deploy Preview for privacyguides ready!

Name Link
Latest commit 0fbb53414b0b46ba11344e82ce24b0ec301004a7
Latest deploy log https://app.netlify.com/sites/privacyguides/deploys/641c7e2a105c2f0008668430
Deploy Preview https://deploy-preview-2099--privacyguides.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

netlify[bot] avatar Mar 22 '23 15:03 netlify[bot]

One of the advantages of telnum.net is they take monero which I'm not aware of the others doing.

Their once-use disposable SMS numbers are useful for things like Discord. Some rooms there require a set phone number. Discord does do some checking to see if it's a VOIP number, and you don't get charged if no SMS is received from the VOIP number, so you can just try again.

dngray avatar Mar 23 '23 02:03 dngray

There is also https://silent.link/

jonaharagon avatar Mar 23 '23 03:03 jonaharagon

There is also https://silent.link/

Silient Link however interresting is not VOIP but a regular esim. Would maybe fall in a data category with PGPP by invisv

ph00lt0 avatar Mar 23 '23 09:03 ph00lt0

One of the advantages of telnum.net is they take monero which I'm not aware of the others doing.

Their once-use disposable SMS numbers are useful for things like Discord. Some rooms there require a set phone number. Discord does do some checking to see if it's a VOIP number, and you don't get charged if no SMS is received from the VOIP number, so you can just try again.

I am not sure if we should recommend disposable numbers, it may link you to others which could be an issue if used for criminal activity and you therefore become a target. In addition we have seen that often numbers get tight to accounts for 2FA even if the users do not know this. So you will be locked out of your account. It is not always possible to see this consequence in advance.

ph00lt0 avatar Mar 23 '23 09:03 ph00lt0

Thanks for adding the criteria @jonaharagon!

i still think we need to warn users about the trackers in the Hushed app. And I really wonder why Google Voice is not on the list. For all I see this is the most stable option on Android if you live in the right area.

ph00lt0 avatar Mar 23 '23 09:03 ph00lt0

@ph00lt0 see: https://github.com/privacyguides/privacyguides.org/pull/2099/files#diff-1e0a622877fe626bbe5eceee6525b85baed7d4eaf7addea856f4f04b6eaac7f1R77-R79

Google Voice doesn't meet at least two of our criteria. I'm not interested in recommending less privacy-respecting providers on a cost-basis alone, which seems to be the only advantage it has.

jonaharagon avatar Mar 23 '23 13:03 jonaharagon

After researching PGPP a bit more I think that the concerns about it I had in https://github.com/privacyguides/privacyguides.org/discussions/1615#discussioncomment-3355447 are correct, I'm not going to include them.

I did initially think that PGPP might still provide protection against third-party IMSI-catchers like Stingrays even though it doesn't protect against network operator tracking, but even in that case it appears that more advanced catchers can track IMEI numbers as well, which is the whole problem anyways.

jonaharagon avatar Mar 23 '23 14:03 jonaharagon

After researching PGPP a bit more I think that the concerns about it I had in #1615 (comment) are correct, I'm not going to include them.

I did initially think that PGPP might still provide protection against third-party IMSI-catchers like Stingrays even though it doesn't protect against network operator tracking, but even in that case it appears that more advanced catchers can track IMEI numbers as well, which is the whole problem anyways.

To be clear, since the launch I have been very sceptical of PGPP and especially on their claims. But one thing they do well is that using cryptogaphy they made it impossible to figure out who pays for which subscription. This could still be a huge advantage that I have not seen elsewhere.

I was actually arguing a long time against PGPP' feature to automatically change IMSI numbers as tbh I think this only makes you more visisble. If I were some 3 letter agency I would be looking for IMEI number that regularly change IMSI.

ph00lt0 avatar Mar 23 '23 15:03 ph00lt0

But one thing they do well is that using cryptogaphy they made it impossible to figure out who pays for which subscription. This could still be a huge advantage that I have not seen elsewhere.

I'm unsure how this is an advantage over paying for Silent Link with Monero?

jonaharagon avatar Mar 23 '23 15:03 jonaharagon

But one thing they do well is that using cryptogaphy they made it impossible to figure out who pays for which subscription. This could still be a huge advantage that I have not seen elsewhere.

I'm unsure how this is an advantage over paying for Silent Link with Monero?

Because getting monero requires KYC giving vague companies pasport copies. Impossible to obtain in a sensible way. It surely isn't worse than paying with crypto.

ph00lt0 avatar Mar 23 '23 15:03 ph00lt0

Okay, I'm following you. I added PGPP with the requisite warnings for review, it does seem like there is at least one compelling use-case. I also like that they have unlimited data.

jonaharagon avatar Mar 23 '23 16:03 jonaharagon

https://ockham-solutions.fr/site/en/products/mercure/mercure-v4.html

Just for reference shows why IMSI changing is ineffective.

ph00lt0 avatar Mar 31 '23 18:03 ph00lt0

Add textverified.com. They offer both short and long term plans (like jmp.chat).

They ask for the bare minimum for credit card payments and they accept a few cryptocurrencies (bitcoin, litecoin, ethereum, tether but not monero at the moment).

DecemberGiraffe avatar Jun 24 '23 22:06 DecemberGiraffe

This pull request has been mentioned on Privacy Guides. There might be relevant details there:

https://discuss.privacyguides.net/t/voip-service-recommendations/13257/6

privacyguides-bot avatar Jul 20 '23 16:07 privacyguides-bot

This pull request has been mentioned on Privacy Guides. There might be relevant details there:

https://discuss.privacyguides.net/t/voip-service-recommendations/13257/9

privacyguides-bot avatar Jul 25 '23 20:07 privacyguides-bot

Consider the registration policies for each service per-country, as well. Buying a "burner" e-SIM can be considered illegal in many regions, so some providers actually break the law while providing anonymous communication.

Some options for crypto-accepted providers to think about:

  • Crypton https://crypton.sh/ (registration available through Tor without ID verification)
  • https://virtualsim.net/ (useful mostly for SMS verification, OTP codes - not recommended for sensitive uses)

Also, you can check out Cryptwerk's list of XMR-friendly operators.

nopeitsnothing avatar Jul 28 '23 18:07 nopeitsnothing

What about Cloaked? They seem to be more of an all-in-one solution that includes email aliases but one of their notable features is unlimited phone numbers at a flat monthly fee which lends itself to creating a new phone number for every interaction rather than having to decide how to allocate a limited amount of numbers. This would minimize the inconvenience of any one recipient of a phone number doing something that would require you to delete it, since you could just deactivate a unique number rather than having to migrate every service that relies on a shared one.

BionicBison05 avatar Aug 20 '23 18:08 BionicBison05

if we should recommend disposable numbers

For accounts you don't really care about it might be fine. Some silly discord room for example where you want to ask about support of a product or something.

They also do rental numbers too.

dngray avatar Jan 21 '24 20:01 dngray

This pull request has been mentioned on Privacy Guides. There might be relevant details there:

https://discuss.privacyguides.net/t/calling-and-texing-with-jmp-voip-through-included-snikket-xmpp-server/11538/14

privacyguides-bot avatar Feb 22 '24 01:02 privacyguides-bot