Comment by nullc
5 days ago
They don't know what they are doing if they have those questions. I've found mine in multiple data breaches. If they were real they'd broadly grant access to every account.
Or maybe to be more accurate: they do know what they're doing, recovery is a cost center so they're minimizing it. But outside of special cases with special statutory affordance (like credit card fraud) the loss is on you* if you get robbed via their weak security. So companies are intentionally minimizing their costs because you're the one that takes the cost when their security is poor.
I have encounter the pronounceable issue-- though reading 32 hex characters over the phone really wasn't *that* bad. So now-- and for the last 15 years-- I make them pronounceable passwords.
> especially in a crisis time
I've tried to organize my life so that I never need 'crisis' access to some stupid online account. I recommend it!
In a crisis, you wouldn’t need to access your banks, or your patient portal, or refill prescriptions at your pharmacy, or pay your rent, or shop for groceries?
Or just, simply… sign in to your personal Apple/Microsoft/Google account at all?
Weird, dude.
I keep emergency cash. Why would I need a login to get a prescription? ... and rent can be late and/or paid with a check. Medical providers can access my records without my help at all-- pretty important since I might be unconscious!
What kind of cyberpunk dystopia do you live in where you need a login to an electronic service to get groceries?!
If that kind of dependency on third party services is normal then I'm glad to be weird!
:D