3 ms·
Sorry, you're being too obtuse for me, and I'm legitimately interested to know what you're suggesting. Some sort of one-time code that the user prints out to ca
by coldpie 11y ago
Sorry, you're being too obtuse for me, and I'm legitimately interested to know what you're suggesting. Some sort of one-time code that the user prints out to call into phone support?
- Pxtl 11y agoThe customer's credit card or bank card, or even the private code on the cc. Unlike ssns, those are changed regularly and trivial to replace if compromised, if those have been hacked then the customer is already completely owned. Forward the customer to a security department trusted to handle CCs.
- ryanlol 11y agoAnd when someone loses their credit card? And you usually only need the SSN and DoB of your target to get their full card # anyway.
- Spooky23 11y agoThe US Treasury's consumer web portal used to do this for online accounts many years ago. They mailed you a plastic card that had a map-like grid. I believe it was mailed using USPS Certified Mail that you validated online. Once validated, you were asked to provide the code for "Column A, Row 14", and then were prompted for a password. IIRC, you could also set it up so that you can login and view your balances with just a password, but would need to do step-up auth to buy/sell/transfer securities. IMO a nice solution from a security POV. Certainly better than online brokers -- Charles Schwab "protects" my retirement savings with some bullshit 6 character password. Customers HATED it, and the "I lost my card" process involved having another card mailed to you. So they replaced it with another solution that is IMO less secure.
- junto 11y agoIt's called a TAN: https://en.m.wikipedia.org/wiki/Transaction_authentication_number https://en.m.wikipedia.org/wiki/Transaction_authentication_n...