4 ms·
If I wanted more security on my account, is there a different service I should be using?
by castis 11y ago
If I wanted more security on my account, is there a different service I should be using?
- boredpudding 11y agoAmazon Web Services is great, and as far as I experienced, their support knows more than average.
- infinite8s 11y agoYou can get AWS customer support to reset your password if you know the last 4 digits of the credit card used to pay for the account. This is the same info that's printed on any credit card receipt.
- nommm-nommm 11y agoIf they have your bank account number for whatever reason you can also use last 4 of the bank account number. Your bank account number is not secret by design and most people only have one.
- infinite8s 11y agoNot only is it not secret, it's printed on every single check for that account.
- dorfsmay 11y agoI once lost my gandi.net password. It took sending copies of 2 photo id, and answering the phone listed in the who is database before they reset it. I just wish that their DNS updates were push through faster.
- ryanlol 11y agoThat's not good verification. It takes a couple of minutes to produce convincing fake ID scans, and they aren't going to have anything to verify them against. And presumably they wanted you to send those photos to them as an unencrypted email attachment, right?
- celticninja 11y agoits better verification than most will require.
- ryanl0l 11y agoMost will require a password reset email, I'd say that's significantly better than asking for ID scans. Edit: Since I'm getting some downvotes I'd really like to know how one could possibly argue that asking for ID scans is better than email resets. You can't really forge the ability to receive email at an address, but you can very easily replace the name on an ID scan.
- celticninja 11y agoDid you read the article? I ask because one of the problems was a compromised email account.
- ryanlol 11y agoI did. It doesn't change anything, email is still a way better verification method than ID scans that the company will be unable to authenticate.
- celticninja 11y agounless your email account has been compromised.
- ryanlol 11y agoEven if the email account is compromised it's still stronger proof of identity than ID scans. An attacker can't just pretend to be able to read your email, such ability is too easy to conclusively prove. To be able to read your email they need to hack you somehow. But for a fake ID the attacker only needs to throw your name in a PSD and they're good to go.
- evanosaurus 11y agoSeriously. Gandi is the only registrar I use anymore.
- matthewdrussell 11y agoUse 2FA on your Email Accounts Use 2FA on your Namecheap account Maintain a sensible backup policy Store your passwords in something secure like KeePass
- roywiggins 11y agoNearlyFreeSpeech seems pretty serious about this sort of thing: https://www.nearlyfreespeech.net/about/faq#LostEverything https://www.nearlyfreespeech.net/about/faq#LostEverything