Profile picture
John Anderson
@jja0
, 3 tweets, 1 min read Read on Twitter
Hey #infosec peeps! I got locked out of an account so I had to call customer service.

The rep asked for PII, and then unlocked my 2FA. She literally said this: "They ask the most stupid questions ever that nobody can remember. I suggest you pick 3, then screenshot it"
So, I refreshed my screen, and I enountered the worst choice of 2FA questions ever. I literally have no idea what the last name of my best friend from 3rd grade is. His first name is Toure, and I'm friends with him on FB these days, but who in the hell knows that when they are
literally, at best, 8 years old. May I humbly suggest that, if your own front-line CSRs are telling your customers to "just screen shot your 2FA answers" you are hands down, doing it wrong? Asking for a friend.
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to John Anderson
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#infosec

Related threads

Profile picture
Fade to Grey
@old_literature
@Yahoo Hi. I know somebody who has been locked out of his Yahoo and Flickr account since 2015, because somebody at your company thought he had a bright idea, and it was one of the dumbest ideas anybody has ever come up with.
@Yahoo The guy knows his Yahoo password by heart. What he doesn't know, because a box carrying his records failed to arrive at his new home, is the password for the Google account he used as a contact address for his Yahoo account.
@Yahoo But, having a mystifying faith in your company's ability to not be completely insane, he thought he could log into his Yahoo account (because he remembered the password for that), and once in, reset the password for his Google account (which used the Yahoo address as a contact).
Read 19 tweets
Profile picture
#Fsck 'Em All
@fsckemall
Usually you try to get a Twitter account suspended *before* it can point out how badly your lawyer completely flubbed his make-or-break hearing that led to 12 of your 17 causes of action getting immediately dismissed 🤔
If y'all could kindly encourage folks to come follow @fsckemall for the next week, it would be appreciated 😂

An appeal's pending, but we know how those things go. Coordinated false-flagging works and Twitter does jack diddly about it
Also, we made some changes since last time so Mike doesn't have to monitor emails or pretend he understands social media because he's my age but still somehow a boomer
Read 206 tweets
Profile picture
Mencius Moldbugman
@moldbugman
In honour of Greta Thunberg’s odyssey across the Atlantic, I would like to present some notes taken from 2015 when I spent some time in Sweden and concluded it was hell on Earth.

(Not claiming to be an expert on Sweden if there are any errors. These were just my observations)
Important point: I was in Sweden during the winter. The winters are, obviously, brutal in Sweden with about four hours of sun and freezing temperatures. If I had visited in the summer I may have had slightly more positive feelings about the country.

I doubt it though.
Sweden was cold, dark and depressing. We were getting about 5 hours of daylight from 10am till 3pm, and when I ventured up to the frozen wastes of Lapland I was getting about 3 and a half hours of daylight only. Maybe fun for a winter holiday, but I was there to work.
Read 82 tweets
Profile picture
Serge Egelman
@v0max
Today's personal story of machine learning run amok (thread):

My research group is looking at the privacy behaviors of paid apps. Doing so requires us to purchase lots of paid apps. The Play Store processes each purchase separately, as opposed to batching them. 1/
So, purchasing, say, 1,000 apps will result in 1,000 credit card authorizations. Banks enforce a maximum number of card authorizations per day. In conducting this study, it appears as though this number is in the double digits. Thus, my card was repeatedly frozen. Repeatedly. 2/
After multiple hourly calls to my bank to explain the problem, they said there's nothing that can do: their fraud detection algorithm will always lock the account after this number of transactions. Okay, Plan B: we'll buy gift cards. 3/
Read 11 tweets
Profile picture
No More Nice Conversations 🏴󠁧󠁢󠁳󠁣󠁴󠁿🇪🇺
@NiceConvos
Hey @DHLParcelUK let's continue our conversation in public and see if you still refuse to help me, shall we? I know you want everyone to send you a DM, to keep it nice and private and to then NOT respond for hours or days, or not read the messages properly. This isn't working. 1/
Last week, a parcel to me was posted. Unfortunately it was with you @DHLParcelUK a mistake that won't be repeated, trust me!
When dropping the parcel off, we got a confirmation slip, which also has a tracking number on it. Checked the tracking no and it showed as dropped off. 2/
We tracked it through the stages @DHLParcelUK and everything seemed fine. It was dropped off at the shop. Then picked up from the shop by you. Brought to a central place. Shipped on. Received in the local depot. Loaded on the van. 3/
Read 27 tweets
Profile picture
✨Louise ✨
@L_ou_ise
what I could gather they have chosen to be referred to as both Jonathan and Jessica and no amount of disgust and hatred I feel for someone could get me to misgender them on purpose. It took me ages to decide to actually make this thread happen because my story with this person is
very much still an open wound and traumatised me in ways I'm not sure I even fully comprehend. I appreciate RTs to get the word out, and I also am open to answering questions but please do not expect me to answer everything, this is very overwhelming. The only reason I am willing
to dig all those things out is because I have assessed the situation and decided I could not live with myself if even more people got hurt because of such a despicable person. I would like to state that, for all intents and purposes, proof is available but I cannot post it on
Read 66 tweets

Trending hashtags

#infosec #HangThemAll #LOLcrimes #LowerEd #Estònia #request #sustainability #HarryPotter #HungerGames #Audacious #IR40 #food #fashion #Expansion #RepúblicaDigital #GodLovesYou #Ask #walkway #Malaysia #astroturf #bot #biz #QAnonGilroy #eRepública #QAnonElPaso
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!