Re:Schneier on Security: Fun with Secret Questions
by mike-cardwell on Saturday August 11, 2012 @06:49PM
(#4371215)
Call centre: Can you please provide the answer to the secret question.
Social engineer: sigh, I know this is going to sound really strange, but I just pick random words when I set up secret questions, and I'm not sure what I used with you. If it helps, it will just be a set of random words that make no sense...
Call centre: Ok, I've spoken to my supervisor and he said that, seeing as you kind of know what it's like, and seeing as you have the name and address, I can reset your password. What number would you like me to SMS it to?
Social engineer: sigh, I know this is going to sound really strange, but I just pick random words when I set up secret questions, and I'm not sure what I used with you. If it helps, it will just be a set of random words that make no sense...
Call centre: Ok, I've spoken to my supervisor and he said that, seeing as you kind of know what it's like, and seeing as you have the name and address, I can reset your password. What number would you like me to SMS it to?