4 ms·
Sending a new password though snail mail might be the dumbest thing I’ve heard all week!
by 40four 6y ago
Sending a new password though snail mail might be the dumbest thing I’ve heard all week!
- slim 6y agoit's a thing. my bank has even special paper that obfuscates the password so you can't see it through the envelope.
- alvarlagerlof 6y agoTotally happens in Sweden
- Nextgrid 6y agoIt's not completely dumb. Address verification can be part of an identity verification measure. It shouldn't be the only one, and an override should be possible, but it's completely valid and effective at thwarting remote attacks.
- 40four 6y agoSure, the logic lines up. I think it’s dumb just because how un-useful it is. Waiting for a week for a password reset to arrive in the mailbox is pretty painful. Pretty secure I suppose, except in the OP’s case, where it was sent to an old address. And they wouldn’t update it over the phone? So they essentially gave some strangers access to his bank account.