News for hackers. Stuff that matters.

A comment on Ask HN: How to out a MAJOR online company storing passwords in plaintext?. Parent comment

Re:Ask HN: How to out a MAJOR online company storing passwor... by stephenr on Monday June 01, 2015 @05:23PM (#9642255)
My bank uses an automated system to verify a pin (ie the operator transfers you to confirm identity then you come back)

But it also depends on the realm. Before the saas craze, a lot more support was performed in-house meaning you didn't have the same scale of problem.

[ Parent | on HN ]
Re:Ask HN: How to out a MAJOR online company storing passwor... by ryanlol on Tuesday June 02, 2015 @01:25AM (#9644027)
Verify a pin? But that's still something you have to remember, not providing support for users who have forgotten their passwords doesn't tend to be an option.
[ Parent | on HN ]
Re:Ask HN: How to out a MAJOR online company storing passwor... by stephenr on Tuesday June 02, 2015 @02:00AM (#9644137)
As I said, it's for my bank, so it's my card pin - I already need to remember it.

Also as I said - this was much less of an issue when companies maintained IT departments and installed software. It's much easier to verify that Julie on the phone really is Julie when it's an internal support mechanism.

[ Parent | on HN ]