3 ms·
1) They shouldn't be asking this type of question in the first place. They're promoting insecure practices, and can't seriously expect all their customers to kn
by tlrobinson 14y ago
1) They shouldn't be asking this type of question in the first place. They're promoting insecure practices, and can't seriously expect all their customers to know they should lie in their answers.
2) Knowing the answers to those questions shouldn't allow an attacker direct access to the account. It should initiate a password reset via email.
- randomfool 14y agore: 2- the attackers apparently had an email address very similar to the victim's email. Most likely just convinced the tech support that the victim's email addr had a typo.
- tlrobinson 14y agoEither way it's Site5's fault. They need to be aware of social engineering attacks.