What industry secret are you aware of that most people aren't?

lil_shi@programming.dev to Asklemmy@lemmy.ml – 429 points –
633

You are viewing a single comment

Not the password to unlock your phone, but the credentials your bank may require to verify your identity over the phone. A security question/answer, a passphrase or a sequence keyed during the call.

This is correct, i should have said “telephone banking password/passcode” but also the security questions are at best hash encrypted (so basically plain text). I had thousands of hours of call recording and millions of customer details on my work laptop all unencrypted. The security for enterprise telephony companies is seriously lax, I wouldn’t be surprised if a few unexplained leaks originated from these companies.