Re:Namecheap live chat social engineering leads to loss of 2...
by 8_hours_ago on Tuesday April 12, 2016 @03:08PM
(#11482568)
Until someone says "I know my dad was born in Minneapolis, what does it say??" and the customer service representative replies "Huh, it looks like the answer is just gibberish...", "Ah! I must have just mashed on my keyboard when I made the account, sorry about that!!", "No problem, your password is now reset to foobar".
Re:Namecheap live chat social engineering leads to loss of 2...
by ludamad on Tuesday April 12, 2016 @03:54PM
(#11482998)
While avoidable with training, that brings up its own issue: What if what's being asked of the people taking these calls is outside their pay range?
Re:Namecheap live chat social engineering leads to loss of 2...
by aquadrop on Tuesday April 12, 2016 @06:54PM
(#11484292)
I think all account credentials related things should be handled by special support people, who were trained to understand the situation. Shouldn't be that big percentage of all requests when people need to change/remember password and can't use regular ways.
Re:Namecheap live chat social engineering leads to loss of 2...
by voltagex_ on Wednesday April 13, 2016 @12:34AM
(#11485763)
Then the company's decisions on how much to pay their call centre staff has just opened up a possible vector for attack. Simple as that.
Re:Namecheap live chat social engineering leads to loss of 2...
by mjevans on Tuesday April 12, 2016 @03:07PM
(#11482558)
I did that to my payroll account to try and prevent this very issue.
Little did I know that it's one of those services you need the password (I had written that down at the time as it was temporary) AND these questions that are usually used for password resets.
I don't think that will ever get fixed until I change jobs again.
What city was my dad born in? xGU,wT&Yvcn6vr?]#,mE of course.