3 ms·
So in short: - They're doing things correctly - They ask for a code over the phone to verify your account - Their Twitter guy refers to this as a "passwo
by jasonkester 12y ago
So in short:
- They're doing things correctly
- They ask for a code over the phone to verify your account
- Their Twitter guy refers to this as a "password"
- Nobody reads anything on the internet, therefore everybody is concerned and fighty.
There's no indication of how passwords are actually stored. This is all about the passphrase you tell the guy on the phone so that he can verify your account. It seems reasonable that that guy would need to be able to see that word on a screen so that he can compare it to what you say.
Still, it's good that people are still really angry about this, 23 hours after their support guy explained what's going on.
- shultays 12y agoIf the operator is only one that checks credential, it is still huge security risk IMHO. He/she can reuse this information to imitates one of the customers he got the credentials. Here, the operator forwards you to a machine and you input your phone password, so the operator does not know your whole credentials.