3 ms·
You can't understand at all how someone with your coworker's voice might lull you into a false sense of urgency and safety? Security is a weak-link problem, no
by ketzo 3y ago
You can't understand at all how someone with your coworker's voice might lull you into a false sense of urgency and safety?
Security is a weak-link problem, not a strong-link one. You have to plan for the least security-minded people, the tired and stressed employee.
- deleted 3y ago[deleted]
- rmbyrro 3y agoI can understand how someone with my coworker's voice might lull myself into a false sense of urgency and safety. To the point of sharing an OTP code over the phone from a strange number? I'm sorry, no.
- SoftTalker 3y agoYou could give them a false number and see what happens. That might trip up their script enough to reveal they aren't who they seem to be. Just play dumb -- "I can't understand why it's not working, that's the number on my phone...."
- rmbyrro 3y agoThat's also a good idea.
- matsemann 3y agoThey could trivially spoof the number they're calling from to match.
- rmbyrro 3y agoOr I could call them on a known point of contact, like a phone number or IM.