News for hackers. Stuff that matters.
Re:Why are banks still getting authentication so wrong? by dogmatism on Tuesday May 13, 2025 @08:55PM (#43979576)
They also should be specific to ask you to say it, not confirm what they say

Because I have literally seen this go wrong: “Mr John Smith, you’re here for procedure X, yes?” “Yes” Some other provider overhears: “I thought that was Mr Jones for procedure Y” “Are you Mr smith or Mr Jones?” “Mr Jones” “Then why did you say yes when I asked if you were Mr Smith” “I assumed you knew best”…

People do weird things in healthcare settings

There are no comments on this comment yet.