3 ms·
There's a very simple solution which is to centralize the process. Banks learned this decades ago. It's why your teller can't do anything that an ATM machine ca
by ramesh31 3y ago
There's a very simple solution which is to centralize the process. Banks learned this decades ago. It's why your teller can't do anything that an ATM machine can't do anymore.
- solardev 3y agoWhat do you mean? Sometimes when I forget my ATM card, I go to the teller, who can help me after checking my photo ID and maybe some security questions.
- ramesh31 3y agoRight, but they still can't do anything you wouldn't be able to achieve over the phone with the centralized support line. Maybe verifying your identity for a cash withdrawal, but that still requires knowing the same secrets you'd need to just replace the card. The branch employee has no more access to your account than you do.
- solardev 3y agoBut isn't that kinda the crux of it? If I can withdraw cash by presenting a photo ID instead of using my 2FA online, it is both more convenient for me as an end-user and also less secure (opens the account up to social engineering, fake IDs, etc.). Similarly, some 2FA implementations allow human support agents to manually reset the 2FA, sometimes making that the weakest link. The ruthless alternative is "If you lose your 2FA, you lose your entire account and there's nothing we can do about it". I've rarely seen that implemented in normal apps.
- hn_throwaway_99 3y agoYeah, I was thinking at the very least changing SIM assignment, given the huge target this is for bad guys, should require confirmation by at least 2 unrelated employees.