4 ms·
Date of birth is nothing. It's public on your Facebook profile. And even ignoring that voice ID is insecure, I still think for the amount of complexity going i
by danShumway 4y ago
Date of birth is nothing. It's public on your Facebook profile.
And even ignoring that voice ID is insecure, I still think for the amount of complexity going into voice ID, there are much simpler systems that would be just as easy to use. The difficulty of getting someone to enroll their voice into a database can't possibly be lower than the difficulty of getting them to read a code off the back of their card, or to set up a passcode, or to read off an OTP from an app.
Maybe balance checks are trivial enough where someone doesn't care if they get hacked, but it's still weird because there should be a secure login method over the phone that gets used for everything. That there are separate login methods for different operations is weird and probably not good security. Why bisect it?
If the normal login methods are too cumbersome or hard, well... that's another situation that's worth questioning. There are easy login methods for services that are much more secure, why isn't the normal phone authentication using those? Why is it using a method that's so cumbersome that they need a different login method to check bank balance?