News for hackers. Stuff that matters.
Re:The weakest link by far is Apple by stephengillie on Tuesday August 07, 2012 @11:35AM (#4350548)
For support organizations, hackers and social engineers are still edge cases. The primary use case is dealing with paying yet indignantly impatient non-technical users. These people treat identity verification as stalling, thinking you're trying to get them off the line so you don't have to deal with their problem.
Re:The weakest link by far is Apple by SoftwareMaven on Tuesday August 07, 2012 @12:34PM (#4350850)
Munich is why you don't have a one-size-fits-all approach.

If I can't figure out how to turn on my shiny, new Mac, there is zero need to any verification. If I'm asking for a password reset, they should know for sure who I am by the end.

I had to remove an authentication from my Blizzard account once. They required me to do all the normal verification stuff (secret questions, password, etc), send an ID and confirm the process via a contact point I already had on the account. It took 24 hours. And they did it right.

Re:The weakest link by far is Apple by SoftwareMaven on Tuesday August 07, 2012 @03:59PM (#4351955)
It is always interesting to see what my iPad decided I was trying to say. I wish the edit window was a bit longer. I don't check back immediately.

For the record, "Munich" == "Which" in iPad-ese.