3 ms·
I don't blame companies for supporting the "20 questions over the phone" last line of lost passwords, but your account should be secured as part of the process
by Pxtl 11y ago
I don't blame companies for supporting the "20 questions over the phone" last line of lost passwords, but your account should be secured as part of the process - take a restore point, dump the credit card info, lock some features for a week, etc.
- ajmurmann 11y agoI do blame them. These questions are always the weak spot and any system is only as secure as that weakest point. Three answers to those questions are typically trivial to find out. I find it downright malicious to even suggest someone protects their data or wealth by asking people what the name of their high school teacher was. This is a incredibly stupid idea and suggesting this to your users shows that they are either stupid to the point where they should be considered unemployable at any company or criminals.