3 ms·

The techrep shouldnt be allowed to reset your password. For all you know, that guy is your wife's ex. This reminds me of facebook and how all its employees wer

by ralfn 14y ago

The techrep shouldnt be allowed to reset your password. For all you know, that guy is your wife's ex. This reminds me of facebook and how all its employees were stalking people using the god password. They can and should follow bank protocol. Require an ID, make every action reversable ( like being able to undo a wipe ) and have both employee and requester on tape, with id's.

myko 14y ago
> This reminds me of facebook and how all its employees were stalking people using the god password. Wait what? Sorry to get off topic but when did this happen?
- moreati 14y ago
  Possibly referring to this story. http://online.wsj.com/article/SB10001424052702304898704577478483529665936.html http://online.wsj.com/article/SB1000142405270230489870457747... If so, the quote only says they could stalk people with the master password, not that they were.
  - tedunangst 14y ago
    This is the internet, we don't distinguish between could do and did do.
- ralfn 14y ago
  Facebook employees were able to login to any acount using the password "chucknorris". Including being able to read private messages of their friends, families, ex-girlfriends, etc This wasnt just true when facebook was a university startup, but even when they were already the largest social network in the US.
ams6110 14y ago
Honestly, the bank protocol is overkill for 90% of users. Most people using iCloud are using it to sync photos of their cat. The number who are keeping "their life" in the cloud is basically confined to techno-geeks. Your average iCloud user is not necessarily going to want to a) prove their identity initially or b) do so again to get support. I think you are better off taking the approach of "don't put something in the cloud if you can't afford to lose/expose it." Yeah, that pretty much limits its usefulness, at least or now. So it is.
- ralfn 14y ago
  If you dont put anything of value in iCloud, you dont care enough about a reset: you could just setup a new account. Having every underpaid store clerk being able to reset the account of every customer, is just dangerously stupid. Just not having a reset feature is even better.

by ralfn 14y ago

myko 14y ago

> This reminds me of facebook and how all its employees were stalking people using the god password. Wait what? Sorry to get off topic but when did this happen?

moreati 14y ago
Possibly referring to this story. http://online.wsj.com/article/SB10001424052702304898704577478483529665936.html http://online.wsj.com/article/SB1000142405270230489870457747... If so, the quote only says they could stalk people with the master password, not that they were.
- tedunangst 14y ago
  This is the internet, we don't distinguish between could do and did do.
ralfn 14y ago
Facebook employees were able to login to any acount using the password "chucknorris". Including being able to read private messages of their friends, families, ex-girlfriends, etc This wasnt just true when facebook was a university startup, but even when they were already the largest social network in the US.

ams6110 14y ago

Honestly, the bank protocol is overkill for 90% of users. Most people using iCloud are using it to sync photos of their cat. The number who are keeping "their life" in the cloud is basically confined to techno-geeks. Your average iCloud user is not necessarily going to want to a) prove their identity initially or b) do so again to get support. I think you are better off taking the approach of "don't put something in the cloud if you can't afford to lose/expose it." Yeah, that pretty much limits its usefulness, at least or now. So it is.

ralfn 14y ago
If you dont put anything of value in iCloud, you dont care enough about a reset: you could just setup a new account. Having every underpaid store clerk being able to reset the account of every customer, is just dangerously stupid. Just not having a reset feature is even better.