undefined | Better HN

0 pointsstephenr10y ago0 comments

Phone support can be tricky yes, but there are other ways to identify the caller without storing their password in plaintext

0 comments

ryanlol10y ago

Callbacks? Users PII? There's really no good ways to do phone verification. You can't use any kind of shared secrets as people forget those.

stephenrOP10y ago

My bank uses an automated system to verify a pin (ie the operator transfers you to confirm identity then you come back)

But it also depends on the realm. Before the saas craze, a lot more support was performed in-house meaning you didn't have the same scale of problem.

ryanlol10y ago

Verify a pin? But that's still something you have to remember, not providing support for users who have forgotten their passwords doesn't tend to be an option.

1 more reply

j / k navigate · click thread line to collapse

0 comments

ryanlol10y ago

Callbacks? Users PII? There's really no good ways to do phone verification. You can't use any kind of shared secrets as people forget those.

stephenrOP10y ago

My bank uses an automated system to verify a pin (ie the operator transfers you to confirm identity then you come back)

But it also depends on the realm. Before the saas craze, a lot more support was performed in-house meaning you didn't have the same scale of problem.

ryanlol10y ago

Verify a pin? But that's still something you have to remember, not providing support for users who have forgotten their passwords doesn't tend to be an option.

1 more reply

j / k navigate · click thread line to collapse