Re:I'm a scam prevention expert and I got scammed
by gnicholas on Thursday March 31, 2022 @06:23PM
(#30872890)
I understand the perspective of the paranoid bank exec! But if the alternative is that their customers are trained to give out personal information whenever someone calls and says they're from the bank, that's quite possibly worse.
It would be nice if when someone called me from an institution, they gave me a code that I could enter after calling the number on the back of my card. That way I would have confidence I'm talking to the bank and would feel comfortable giving out verification information.
In the past, it has always been a headache to find my way back to the department that called me.
Re:I'm a scam prevention expert and I got scammed
by jrochkind1 on Thursday March 31, 2022 @04:02PM
(#30871636)
Don't forget the last digit is a checksum digit too. Which I still can't give you an attack, but I also agree that I definitely can't say I'm sure there isn't one.
Re:I'm a scam prevention expert and I got scammed
by hunter2_ on Friday April 01, 2022 @12:12AM
(#30875106)
That does reduce the number of possibilities greatly, which might matter for some attack scenarios, but usually not IMHO as rate limits should thwart any online brute force.
I'd be interested to know how greatly, if someone has the equation for that.
Questions like "is the sum even?" trade a lower opportunity for information leakage for a greater opportunity for a random guess to be correct.