2 ms·
To be fair, it's much worse to have your account hijacked than it being inaccessible for some time.
by static_noise 11y ago
To be fair, it's much worse to have your account hijacked than it being inaccessible for some time.
- vmateixeira 11y agoNot having a process in place for such situations is what doesn't make sense to me. We're talking about a big corporation. Funny thing about it is that their support is so badly designed (to cut costs I suppose) that over the phone line there's not an option to talk with an operator regarding a Microsoft account. All you get is a "check microsoft online support for help on your account being locked"... which, guess what... requires authentication[1]! [1]https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=12&ct=1453290782&rver=6.5.6509.0&wp=LBI&wreply=https:%2F%2Fsupport.microsoft.com%2Fen-gb%2Fgetsupport%3Foaspworkflow%3Dstart_1.0.0.0%26wfname%3Dcapsub%26productkey%3Dwolnewmail%26locale%3Den-gb%26selectedproduct%3DOutlook%26selectedissue%3DYour%2Baccount%2Bhas%2Bbeen%2Btemporarily%2Bblocked%26Service%253a%3DGeneral%2BIssue%26ccsid%3D635888875690235695&lc=1033&id=288908 https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=12&ct=1...
- stromgo 11y agoYou have to consider the prior probability of having your account hijacked. In my case it is very low because I'm careful, but unfortunately authentication systems are one-size-fits-all and are designed for the average careless user. All I get from these systems is weakened security, disruption, and no benefits. I wish I could tell an authentication system that I will not forget my password and to not set up a recovery path using my mother's maiden name. I wish I could tell it that I'm willing to accept the risk of a hijack and to never unexpectedly lock my account because some machine learning algorithm thinks that my activity is suspicious. If anyone here works on an authentication system, then please add these settings.