Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> My bank no longer allows me to reset my password without calling them (thanks bank).

So how are they going to verify it’s you who is calling them?



Ask for things like postcode, birthdate, etc.


None of these are secret, asking for these things provides no security.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: