4 ms·

You fogot the what if scenario where an asteroid is headed towards the earth. I'm being sarcastic, because your comment is so ridiculous. In all seriousness th

You fogot the what if scenario where an asteroid is headed towards the earth. I'm being sarcastic, because your comment is so ridiculous. In all seriousness though, everything you pointed out is literally inconsequential to the question asked. It would 100% be more secure, requiring a state issued id card to reset your password. Plenty of people lose all forms of identification at some point in their lives, and while it sucks and take a bit of time, it's not an insurmountable obstacle, and will eventually be resolved. Why are you acting like you don't understand? You seem like a smart person.

bbarn 4y ago
Plenty of people lose all forms of identification at some point in their lives Yep. I lost my wallet once and my birth certificate was in another state at my parents at the time (and I had no passport). It took less than a day of leg work to get a new state driver's license and bank cards made. Frighteningly little security in that whole process. Had to go to the post office and get a voter registration card, take that and a bank statement/water bill to the DMV, and boom, I had a new ID. Did the clerk at the DMV compare me to my photo? If she did she never said so.
rrwo 4y ago
> It would 100% be more secure, requiring a state issued id card to reset your password. You seem to be under the illusion that state-issued id cards and even passports are secure. People are able to get them simply by showing a birth certificate, which is basically a piece of paper signed and stamped by a town official decades ago. Which comes down to trusting underpaid, overworked people (and possibly underqualified political appointees) who work at the local registry of births or drivers licensing agency or passport office. Considering how important email is for peoples' lives nowadays (especially if it provides access to financial information), a state issued id may be a weaker link. Are you able to detect forged passports and drivers licences? Will your business have insurance in case you make a mistake and reset the password for the wrong person? Have you ever worked in an in-person customer-facing role before? You will encounter angry, sometimes aggressive people. If you're in the US, then expect some of them may be armed.
- tragictrash 4y ago
  I've worked in those roles for many years. I also busted my ass in dangerous blue collar under the table jobs for years before I got into software and my current position. My first software job was 80 hours a week at a startup for 35k a year, and I was happy to do it because it was on the books and I wasn't in danger of getting crushed by heavy machinery. Did I say that a state issued id would be the only form of id required to reset your password? No. That's pretty idiotic, and you know it would never fly in the real world. Come on, let's try and be an adult and stop with the straw man arguments. There's so many avenues of attack for the current password reset process (sim swapping, identity theft) that another layer would definitely improve security. Should we not do it because "oh no someone can forge an id"? Grow up and drop the straw man arguments.
  - rrwo 4y ago
    You said in the comment that I replied to > It would 100% be more secure, requiring a state issued id card to reset your password. And when I criticize that, you say I am making a "straw man" argument.

bbarn 4y ago

Plenty of people lose all forms of identification at some point in their lives Yep. I lost my wallet once and my birth certificate was in another state at my parents at the time (and I had no passport). It took less than a day of leg work to get a new state driver's license and bank cards made. Frighteningly little security in that whole process. Had to go to the post office and get a voter registration card, take that and a bank statement/water bill to the DMV, and boom, I had a new ID. Did the clerk at the DMV compare me to my photo? If she did she never said so.

rrwo 4y ago

> It would 100% be more secure, requiring a state issued id card to reset your password. You seem to be under the illusion that state-issued id cards and even passports are secure. People are able to get them simply by showing a birth certificate, which is basically a piece of paper signed and stamped by a town official decades ago. Which comes down to trusting underpaid, overworked people (and possibly underqualified political appointees) who work at the local registry of births or drivers licensing agency or passport office. Considering how important email is for peoples' lives nowadays (especially if it provides access to financial information), a state issued id may be a weaker link. Are you able to detect forged passports and drivers licences? Will your business have insurance in case you make a mistake and reset the password for the wrong person? Have you ever worked in an in-person customer-facing role before? You will encounter angry, sometimes aggressive people. If you're in the US, then expect some of them may be armed.

tragictrash 4y ago
I've worked in those roles for many years. I also busted my ass in dangerous blue collar under the table jobs for years before I got into software and my current position. My first software job was 80 hours a week at a startup for 35k a year, and I was happy to do it because it was on the books and I wasn't in danger of getting crushed by heavy machinery. Did I say that a state issued id would be the only form of id required to reset your password? No. That's pretty idiotic, and you know it would never fly in the real world. Come on, let's try and be an adult and stop with the straw man arguments. There's so many avenues of attack for the current password reset process (sim swapping, identity theft) that another layer would definitely improve security. Should we not do it because "oh no someone can forge an id"? Grow up and drop the straw man arguments.
- rrwo 4y ago
  You said in the comment that I replied to > It would 100% be more secure, requiring a state issued id card to reset your password. And when I criticize that, you say I am making a "straw man" argument.