3 ms·
I've had the same situation before, and I don't think I've ever had to read them the entire thing. Usually we did something like this: Rep: "Tell me the answer
by AdmiralAsshat 8y ago
I've had the same situation before, and I don't think I've ever had to read them the entire thing. Usually we did something like this:
Rep: "Tell me the answer to this question."
Me: "Ok, let's see.....ah. So, it looks like a random string of gibberish, right?"
Rep: "Um, well...(unsure if he's allowed to say Yes or No)"
Me: "Yeah, I use a password manager for all my stuff, so all my passwords are randomly generated. I didn't think I'd ever have to read it over the phone. Sorry about that! I can read it out for you, but it might take awhile. If I read you the first three characters and the last three characters, is that sufficient to demonstrate for you that I know the Answer?
Rep: "Yes, I think that would be fine."
Me: "Alright, then! First three, 'F', 'caret', 'capital O'. Last three, 'capital G', 'lowercase l', 'dollar sign'.
---
As I said, I've never had anyone challenge me to read the full thing out. When I explain why it is that way and give them the bookends, they are usually convinced that I'm me.
- aaronmdjones 8y agoAs is demonstrated time and time again, the weakest point in any security system is usually a human being.
- user5994461 8y agoIf the operator gives up after the 10th random character given on the phone, it's still quite secure.
- btilly 8y agoI am reminded of https://xkcd.com/1181/ https://xkcd.com/1181/. What garbage string is there doesn't matter. Just as long as it is recognizably garbage and you know it.
- austhrow743 8y agoTheres a security issue there in that you don't want them in "I think that would be fine" territory. Some of those reps may have been fine with you saying "oh no. I didn't think I'd ever need that and just mashed the keyboard". Better to use something that's still made up, but is plausibly true.
- traviscj 8y ago"I didn't smash this F^O9dA66@wUPpK5$lTXBbrQ#yLP1EGl$"