News for hackers. Stuff that matters.

A comment on Namecheap live chat social engineering leads to loss of 2 VPS. Parent comment

Re:Namecheap live chat social engineering leads to loss of 2... by hrktb on Tuesday April 12, 2016 @12:53PM (#11481218)
Banks don't try that hard. One of my bank is happy to resend me a password by snail mail with an account ID reset by phone.

Also, rechecking the ID of a user can be as simple as asking for a new token payment by the same credit card as used by the account. It's not infailable, the CC can be compromised as well, but it should be way better than what we have now.

[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by thaumasiotes on Tuesday April 12, 2016 @07:39PM (#11484543)
> One of my bank is happy to resend me a password by snail mail with an account ID reset by phone.

This is excellent security, as long as they're not sending it to an address you provided over the phone when you requested a reset.

[ Parent | on HN ]