4 ms·
An employer I worked for would allow you to reset anyone's passwords by calling the help desk, providing their username, and their direct manager. I told the c
by freitzkriesler2 3y ago
An employer I worked for would allow you to reset anyone's passwords by calling the help desk, providing their username, and their direct manager.
I told the ciso this and she asked how a bad actor would figure this out, I said linkedin. She didn't seem pissed so I laughed and 5 minutes later reset her password and sent an email to her self as proof.
That policy changed quick...
- Strongbad536 3y agooh to be a microwave on that email chain
- NorwegianDude 3y agoThats the same security level that Microsoft had. You could get access to any Skype account by contacting business chat support and providing the username and a few contacts of the account you wanted to take over...
- freitzkriesler2 3y agoNot like you could go into service now and get all of that info. ¯ \ _ ( ツ ) _ / ¯