3 ms·

It would be great if sites had an option to remove reset support for your account permanently. One that is literally impossible to reset. But I'm not sure how t

It would be great if sites had an option to remove reset support for your account permanently. One that is literally impossible to reset. But I'm not sure how to do that without implementing complete user data encryption.

zhengyi13 8y ago
... which has some potential downsides for the customer, but also has some potentially huge privacy upsides as well, yeah?
helper 8y ago
If an account that doesn't have this feature turned on is hijacked, the hijacker could turn this on to permanently lock out the owner of the account.
- sizzle 8y ago
  Great point, I wonder if you can solve this with manual identification like taking a picture of your face holding up a driver's license and paper saying you consent up password change?
  - bronson 8y ago
    It’s easy to fake an ID, especially if it doesn’t have to physically feel right.
spookthesunset 8y ago
> It would be great if sites had an option to remove reset support for your account permanently. That falls apart pretty quick when you attach things like recurring billing to your account. Nobody is perfect and at some point somebody, somewhere is going to want to cancel that billing but not have access to their account and checked your "never reset this account" box. How do you deal with that very real edge case? Especially since that edge case can easily escalate to a lawsuit depending on the account in question.
- avar 8y ago
  You empower support to be convinced over the phone to cancel recurring billing, but not to reset 2FA. That way in the very worst case if support gets socially engineered into removing the credit card details from the account the customer will get mildly annoyed as they have to login and reset it, but their whole account won't be taken over.
  - woolvalley 8y ago
    And then eventually the account will delete itself if you can verify billing info as part of removing billing.

zhengyi13 8y ago

... which has some potential downsides for the customer, but also has some potentially huge privacy upsides as well, yeah?

helper 8y ago

If an account that doesn't have this feature turned on is hijacked, the hijacker could turn this on to permanently lock out the owner of the account.

sizzle 8y ago
Great point, I wonder if you can solve this with manual identification like taking a picture of your face holding up a driver's license and paper saying you consent up password change?
- bronson 8y ago
  It’s easy to fake an ID, especially if it doesn’t have to physically feel right.

spookthesunset 8y ago

> It would be great if sites had an option to remove reset support for your account permanently. That falls apart pretty quick when you attach things like recurring billing to your account. Nobody is perfect and at some point somebody, somewhere is going to want to cancel that billing but not have access to their account and checked your "never reset this account" box. How do you deal with that very real edge case? Especially since that edge case can easily escalate to a lawsuit depending on the account in question.

avar 8y ago
You empower support to be convinced over the phone to cancel recurring billing, but not to reset 2FA. That way in the very worst case if support gets socially engineered into removing the credit card details from the account the customer will get mildly annoyed as they have to login and reset it, but their whole account won't be taken over.
- woolvalley 8y ago
  And then eventually the account will delete itself if you can verify billing info as part of removing billing.