News for hackers. Stuff that matters.
Re:Columnist asked researchers what they could find out from... by hawaiianbrah on Thursday August 15, 2019 @11:40AM (#20706160)
They wouldn’t, of course, but it’s painting the caller in a human light that call center employees may empathize with.
Re:Columnist asked researchers what they could find out from... by dvtrn on Thursday August 15, 2019 @11:47AM (#20706228)
This statement confuses me, what are you proposing the call center employee empathize with me over? The reason I'm even calling, or the authentication and account verification answers and random bits of string that I enter into my account when signing up?
Re:Columnist asked researchers what they could find out from... by defen on Thursday August 15, 2019 @12:10PM (#20706481)
"You" in this case are a hacker / social engineer trying to break into someone's account. If your target puts gibberish as the answer to that question, here's how the conversation will go:

Operator: What is your mother's maiden name?

Hacker: Smith (let's say this is the real name, gleaned from public records)

Operator: That's not what I have here

Hacker: Oh, you know what, I think I just put gibberish when I signed up. I thought that would add some extra security, but I forgot what I wrote, ha ha, joke's on me. The real name is Smith though.

Operator: Story checks out, I'm giving you access to the account now.

Re:Columnist asked researchers what they could find out from... by edm0nd on Thursday August 15, 2019 @01:32PM (#20707481)
or

Operator: Story checks out, I'm going to reset it to "Smith" for you.