undefined | Better HN

0 pointsryanlol11y ago0 comments

Customer support. A human can then verify the user even if they can only remember a part of the password.

0 comments

3 comments · 1 top-level

stephenr11y ago· 2 in thread

Sounds like a security flaw ripe for social engineering

ryanlolOP11y ago

Customer support by itself tends to be a security flaw ripe for social engineering.

Phone support can be tricky yes, but there are other ways to identify the caller without storing their password in plaintext

j / k navigate · click thread line to collapse