3 ms·
>The attacker says “Ah, a bunch of random characters, do I have to say it? The vast majority of users aren't using random characters, so how would they know to
by EpicEng 8y ago
>The attacker says “Ah, a bunch of random characters, do I have to say it?
The vast majority of users aren't using random characters, so how would they know to say that to begin with? Are you implying they try that line, idk, 10,000 times until it (maybe) works?
- bsurmanski 8y agoone idea: attacker accesses recovery answers for site A. Sees that it is random characters. Attacker has access to site A. Attacker phones sites B,C,D and E, trys social engineering. Attacker now has access to site B,C,D,E also.
- cortesoft 8y agoNah, it would go like this: Support: what is your fathers middle name? Hacker: Michael Support: sorry that is wrong Hacker: oh shoot, I forget I always put the incorrect information in this one... i can't remember, did I put a fake name or random characters? Or was this the one I put a bunch of words into? Support: yeah, it looks like random characters... let's move on
- pbhjpbhj 8y agoProper training, required. That person presumably is legally liable as they've breeched the providers security by giving information; and maybe given away PII.
- acct1771 8y agoThis is the point of failure. This never comes to fruition. "Computers are hard, and I'm just not very good with them!"