Path: csiph.com!weretis.net!feeder6.news.weretis.net!i2pn.org!i2pn2.org!.POSTED!not-for-mail From: D Newsgroups: comp.misc Subject: Re: Using SMS for password reset. Date: Tue, 30 Jan 2024 16:38:00 +0100 Organization: i2pn2 (i2pn.org) Message-ID: <9815dfa4-3b70-85f6-8f3d-e4486f2cd123@example.net> References: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Injection-Info: i2pn2.org; logging-data="1096190"; mail-complaints-to="usenet@i2pn2.org"; posting-account="w/4CleFT0XZ6XfSuRJzIySLIA6ECskkHxKUAYDZM66M"; X-Spam-Checker-Version: SpamAssassin 4.0.0 In-Reply-To: Xref: csiph.com comp.misc:23876 On Tue, 30 Jan 2024, Spiros Bousbouras wrote: > On Tue, 30 Jan 2024 10:39:28 -0000 (UTC) > Dan Purgert wrote: >> On 2024-01-30, Sylvia Else wrote: >>> This is really a rant - venting to release some of the frustration. >>> >>> I'm in the process of selling my house, and I need somewhere secure to >>> hold the proceeds. I decided I'd create a account with a bank I don't >>> otherwise bank with, and interact online with it using a live-DVD on a >>> system that has no storage. So no risk of key loggers or other hacks. >>> I'd remember the strong password, and not have it written down anywhere. >> >> Until you don't remember it, then what? >> >> Because let's face it, eventually we all forget the password. > > That's a very presumptuous thing to say. I have my own ways of storing and > retrieving passwords (which may include just my memory) and I'm confident > they are secure and reliable enough. So don't include me in your "we". > > I share Sylvia's frustration and it's not just with banks. Pretty much any > online site with an option to create an account , will also have some kind > of password reminder , usually sent to your email. Very often I have wished > for sites to offer the option when creating an account to disable any > password reminders but I have yet to see a site which does this. > Just for the record, please add me to the "we". When it comes to password reset, I've never had a bank that does not have go to their office in person to setup accounts and change passwords.