3 ms·

Interesting. Stealing a phone in the future will also steal their voice and therefore activities like bank authorization.

dataflow 4y ago
Now you can steal someone's fingerprints, DNA, phone, and voice all at the same time. Efficiency!
mmsnberbar66 4y ago
What kind of banks do authorization by voice?
- neom 4y ago
  HSBC has the option, I have never enabled it even though they continually push me to.
- LetsGetTechnicl 4y ago
  It's actually becoming more common. I'm not sure how many banks have implemented it, but I've called Spectrum about my internet and a "security" feature called Voice ID that lets you verify your identity with your voice was being advertised
  - wink 4y ago
    Wonder if it's "perfect" enough for that or if they'll add some sort of audio fingerprint (like the invisible dots on the printers).
- mr337 4y ago
  Schwab, and they are pushing it hard.
  - wiredfool 4y ago
    Vanguard too.
  - parpfish 4y ago
    "At Schwab, my voice is my password"
  - jrockway 4y ago
    It seems like all the brokerages got sold hard on this. I have a friend who did customer support for Fidelity and they also pushed the voice ID thing very hard. I think it was to the point they wouldn't help you until you set it up. I have had Schwab accounts for over a decade and called them a couple times, and they didn't bug me about it. Would still prefer WebAuthn to log in, however.
    - ensignavenger 4y ago
      Had Fidelity 401k from work I was trying to rollover to a Schwab IRA. Schwab mentioned setting up the voice password thingy, and I declined and had no further problem. Fidelity tried to push it on me before I could talk to anyone. I refused and had to dial 0 several times for it to transfer me to a person. Glad I no longer have a Fidelity account, if Schwab ever tries that BS I'll raise hell with them.
  - mmh0000 4y ago
    Fidelity does it too
- thefz 4y ago
  Besides, being able to send voice messages to third parties with someone else's voice is a security nightmare.
- drcongo 4y ago
  American banks. Of course.
- albatross13 4y ago
  Fidelity does it. I've had to explicitly decline 'voice authorization' multiple times.
- ghuntley 4y ago
  the australian tax office and various other entities use a vocal print of “in australia my voice identifies me” i wish i was kidding https://amp.theguardian.com/technology/2023/mar/16/voice-system-used-to-verify-identity-by-centrelink-can-be-fooled-by-ai https://amp.theguardian.com/technology/2023/mar/16/voice-sys...
  - wil421 4y ago
    What if you don’t speak English? I guess it wouldn’t really matter but if you were leaning English it might not work with better pronunciation later.
  - imchillyb 4y ago
    ‘My voice is my passport please verify me.’ “…You’re right. I can’t kill my friend.” ::turns to goon:: “Kill my friend.”
- ljf 4y ago
  Pretty sure that gov.uk uses or used voice authentication. Banks certainly do: https://www.vice.com/en/article/dy7axa/how-i-broke-into-a-bank-account-with-an-ai-generated-voice https://www.vice.com/en/article/dy7axa/how-i-broke-into-a-ba...
- Terretta 4y ago
  Some "partners and customers" listed here: https://www.pindrop.com/whos-it-for/banking-finance https://www.pindrop.com/whos-it-for/banking-finance In general, financial institutions (such as the many multi-nationals and regionals that use this) don't want to talk about the specific providers they use, so it can be hard to get a comprehensive view of which are using what. But everyone who is anyone in banking evaluated this provider, for example.
deleted 4y ago
[deleted]
nocsi 4y ago
They already do that now. People are getting phished for their sms codes. As a side note, my local news just reported a big crime spree of people robbing cashless places. They have the manager log into the clover POS machines and issue refunds into their cards. Criminals have been high tech for a while now
- throwawayadvsec 4y ago
  do they just run to the ATM afterwards?
  - dingledork69 4y ago
    Probably better to have someone else wait at an ATM ready to withdraw once they get a text message.
HKH2 4y ago
And enable fake ransom calls. What will we be able to trust?
hammyhavoc 4y ago
This is alarmist at best. Does stealing someone's iPhone today mean that you've stolen their passwords and everything else? No. Why would this change?
- mensetmanusman 4y ago
  People are being held up and forced to enter more passwords, it is definitely rarer than previously because of the technical hurdles Apple has thankfully added. It's just interesting thinking about edge cases and what a stolen phone will mean for your identity 10-20 years from now.

dataflow 4y ago

Now you can steal someone's fingerprints, DNA, phone, and voice all at the same time. Efficiency!

mmsnberbar66 4y ago

What kind of banks do authorization by voice?

neom 4y ago
HSBC has the option, I have never enabled it even though they continually push me to.
LetsGetTechnicl 4y ago
It's actually becoming more common. I'm not sure how many banks have implemented it, but I've called Spectrum about my internet and a "security" feature called Voice ID that lets you verify your identity with your voice was being advertised
- wink 4y ago
  Wonder if it's "perfect" enough for that or if they'll add some sort of audio fingerprint (like the invisible dots on the printers).
mr337 4y ago
Schwab, and they are pushing it hard.
- wiredfool 4y ago
  Vanguard too.
- parpfish 4y ago
  "At Schwab, my voice is my password"
- jrockway 4y ago
  It seems like all the brokerages got sold hard on this. I have a friend who did customer support for Fidelity and they also pushed the voice ID thing very hard. I think it was to the point they wouldn't help you until you set it up. I have had Schwab accounts for over a decade and called them a couple times, and they didn't bug me about it. Would still prefer WebAuthn to log in, however.
  - ensignavenger 4y ago
    Had Fidelity 401k from work I was trying to rollover to a Schwab IRA. Schwab mentioned setting up the voice password thingy, and I declined and had no further problem. Fidelity tried to push it on me before I could talk to anyone. I refused and had to dial 0 several times for it to transfer me to a person. Glad I no longer have a Fidelity account, if Schwab ever tries that BS I'll raise hell with them.
- mmh0000 4y ago
  Fidelity does it too
thefz 4y ago
Besides, being able to send voice messages to third parties with someone else's voice is a security nightmare.
drcongo 4y ago
American banks. Of course.
albatross13 4y ago
Fidelity does it. I've had to explicitly decline 'voice authorization' multiple times.
ghuntley 4y ago
the australian tax office and various other entities use a vocal print of “in australia my voice identifies me” i wish i was kidding https://amp.theguardian.com/technology/2023/mar/16/voice-system-used-to-verify-identity-by-centrelink-can-be-fooled-by-ai https://amp.theguardian.com/technology/2023/mar/16/voice-sys...
- wil421 4y ago
  What if you don’t speak English? I guess it wouldn’t really matter but if you were leaning English it might not work with better pronunciation later.
- imchillyb 4y ago
  ‘My voice is my passport please verify me.’ “…You’re right. I can’t kill my friend.” ::turns to goon:: “Kill my friend.”
ljf 4y ago
Pretty sure that gov.uk uses or used voice authentication. Banks certainly do: https://www.vice.com/en/article/dy7axa/how-i-broke-into-a-bank-account-with-an-ai-generated-voice https://www.vice.com/en/article/dy7axa/how-i-broke-into-a-ba...
Terretta 4y ago
Some "partners and customers" listed here: https://www.pindrop.com/whos-it-for/banking-finance https://www.pindrop.com/whos-it-for/banking-finance In general, financial institutions (such as the many multi-nationals and regionals that use this) don't want to talk about the specific providers they use, so it can be hard to get a comprehensive view of which are using what. But everyone who is anyone in banking evaluated this provider, for example.

deleted 4y ago

[deleted]

nocsi 4y ago

They already do that now. People are getting phished for their sms codes. As a side note, my local news just reported a big crime spree of people robbing cashless places. They have the manager log into the clover POS machines and issue refunds into their cards. Criminals have been high tech for a while now

throwawayadvsec 4y ago
do they just run to the ATM afterwards?
- dingledork69 4y ago
  Probably better to have someone else wait at an ATM ready to withdraw once they get a text message.

HKH2 4y ago

And enable fake ransom calls. What will we be able to trust?

hammyhavoc 4y ago

This is alarmist at best. Does stealing someone's iPhone today mean that you've stolen their passwords and everything else? No. Why would this change?

mensetmanusman 4y ago
People are being held up and forced to enter more passwords, it is definitely rarer than previously because of the technical hurdles Apple has thankfully added. It's just interesting thinking about edge cases and what a stolen phone will mean for your identity 10-20 years from now.