5 ms·
Verizon definitely does ask for account pin whenever I call in, usually entered via number keypad before you're routed to an actual person.
by JoshGlazebrook 10y ago
Verizon definitely does ask for account pin whenever I call in, usually entered via number keypad before you're routed to an actual person.
- josu 10y agoApparently, the PIN is opt-in. >With Verizon on the phone, it was a fairly simple matter to re-reset the portal password, set an account PIN to prevent attacker re-entry and un-do the phone forward.
- nbadg 10y agoUsing social engineering to bypass this is a big enough issue that even the FTC has a blog post about it [1]. It's happened to popular Youtube producer H3H3 (even with a pin) [2]. Fusion did a thing about it at DefCon this year as well, demonstrating exactly how easy it is. The whole video [3] is worth watching, but I'll like to the relevant bit. [1] https://www.ftc.gov/news-events/blogs/techftc/2016/06/your-mobile-phone-account-could-be-hijacked-identity-thief https://www.ftc.gov/news-events/blogs/techftc/2016/06/your-m... [2] https://www.youtube.com/watch?v=caVEiitI2vg https://www.youtube.com/watch?v=caVEiitI2vg [3] https://youtu.be/bjYhmX_OUQQ?t=98 https://youtu.be/bjYhmX_OUQQ?t=98
- x0x0 10y agoHoly crap, watch video #3 it's worth it. She adds herself to the account by calling and asking.
- JoshGlazebrook 10y agoWow that really was crazy easy for her to do that. I guess it also taps into emotions with the crying baby as well.
- initram 10y agoI have many accounts that require a PIN. Many of them I set up years ago and have no idea what the PIN would be. I'm always able to talk my way out of it, though. (And this is not something I practice or know how to do well. I literally just say something like, "PIN? I have no idea. I don't even remember having the option to set one.")
- stanleydrew 10y agoThe problem is that the default PIN (which is what 99% of customers still have probably) is just the last four digits of the primary account holder's SSN.