Groups | Search | Server Info | Login | Register

Groups > comp.misc > #23896

Re: Using SMS for password reset.

Show all headers | View raw

On 2024-01-31, Spiros Bousbouras wrote:
> On Wed, 31 Jan 2024 11:10:34 -0000 (UTC)
> Dan Purgert <dan@djph.net> wrote:
>> On 2024-01-30, Spiros Bousbouras wrote:
>> > On Tue, 30 Jan 2024 10:39:28 -0000 (UTC)
>> > Dan Purgert <dan@djph.net> wrote:
>> >> On 2024-01-30, Sylvia Else wrote:
>> >> > This is really a rant - venting to release some of the frustration.
>> >> >
>> >> > I'm in the process of selling my house, and I need somewhere secure to 
>> >> > hold the proceeds. I decided I'd create a account with a bank I don't 
>> >> > otherwise bank with, and interact online with it using a live-DVD on a 
>> >> > system that has no storage. So no risk of key loggers or other hacks. 
>> >> > I'd remember the strong password, and not have it written down anywhere.
>> >> 
>> >> Until you don't remember it, then what?
>> >> 
>> >> Because let's face it, eventually we all forget the password.
>> >
>> > That's a very presumptuous thing to say. I have my own ways of storing and
>> > retrieving passwords (which may include just my memory) and I'm confident
>> > they are secure and reliable enough. So don't include me in your "we".
>> 
>> So if I was to sit you down at any freshly installed PC of your choice,
>> you could log-in to *any* random service to which you have a
>> username/password combination *from memory* ?
>
> No. I will note in passing that even a yes answer would not necessarily
> be unrealistic. It depends on how many online accounts one has. Someone
> may only have an email online account and nothing more so would only
> need to remember one password.
>
>> Because if there is even a single service to which the truthful answer
>> (which, admittedly I will never know; because this is Usenet, and you
>> can vehemently deny it to your last post) is "well, actually, I'd
>> have to use [password-tool-of-choice] for that site"; then you are
>> solidly in the group of "people who have forgotten the password".
>
> No , I am in the group of people who never memorised the password. 
> [...]
> In any case , I see now that I read in your post more than what you
> intended. You said  "then what?"  and I interpreted that as suggesting
> that we all need help from the website in retrieving passwords and
> that's what I found especially presumptuous.

I actually figured you were taking issue with the second line; since
it's the more explicit/direct statement that "everyone forgets the
password".

For a bank or other "very public institution that is generally very easy
to access", I can completely agree that "look, if/when you forget your
web-access password, come to the nearest branch" is (probably) a better
solution than a "forgot password" link and answering a couple of
questions about my dog.

But then, what about services that aren't "very public institutions that
are generally very easy to access" (Netflix / Amazon / Google / CC
Company / etc.)?

What would a viable "general" solution be?  Call them?  Email?  Too bad,
create a new account?

-- 
|_|O|_| 
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: DDAB 23FB 19FA 7D85 1CC1  E067 6D65 70E5 4CE7 2860

Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Using SMS for password reset. Sylvia Else <sylvia@email.invalid> - 2024-01-30 19:22 +1100
  Re: Using SMS for password reset. Dan Purgert <dan@djph.net> - 2024-01-30 10:39 +0000
    Re: Using SMS for password reset. Sylvia Else <sylvia@email.invalid> - 2024-01-30 21:57 +1100
      Re: Using SMS for password reset. Bruce Horrocks <07.013@scorecrow.com> - 2024-02-06 23:47 +0000
        Re: Using SMS for password reset. "Kerr-Mudd, John" <admin@127.0.0.1> - 2024-02-07 10:31 +0000
        Re: Using SMS for password reset. Ian <gay@sfuu.ca> - 2024-02-07 15:03 -0800
    Re: Using SMS for password reset. Spiros Bousbouras <spibou@gmail.com> - 2024-01-30 14:33 +0000
      Re: Using SMS for password reset. D <nospam@example.net> - 2024-01-30 16:38 +0100
      Re: Using SMS for password reset. Julieta Shem <jshem@yaxenu.org> - 2024-01-30 13:39 -0300
        Re: Using SMS for password reset. Mike Spencer <mds@bogus.nodomain.nowhere> - 2024-01-30 19:56 -0400
          Re: Using SMS for password reset. Julieta Shem <jshem@yaxenu.org> - 2024-01-31 17:57 -0300
      Re: Using SMS for password reset. Dan Purgert <dan@djph.net> - 2024-01-31 11:10 +0000
        Re: Using SMS for password reset. Sylvia Else <sylvia@email.invalid> - 2024-01-31 22:34 +1100
          Re: Using SMS for password reset. Dan Purgert <dan@djph.net> - 2024-02-01 15:16 +0000
        Re: Using SMS for password reset. Spiros Bousbouras <spibou@gmail.com> - 2024-01-31 12:06 +0000
          Re: Using SMS for password reset. Dan Purgert <dan@djph.net> - 2024-02-01 15:48 +0000
            Re: Using SMS for password reset. Spiros Bousbouras <spibou@gmail.com> - 2024-02-01 17:57 +0000
  Re: Using SMS for password reset. Rich <rich@example.invalid> - 2024-01-30 16:39 +0000
  Re: Using SMS for password reset. newsmaster@ausics.net - 2024-01-31 07:02 +1000
  Re: Using SMS for password reset. Sylvia Else <sylvia@email.invalid> - 2024-01-31 09:45 +1100
    Re: Using SMS for password reset. Rich <rich@example.invalid> - 2024-01-30 23:39 +0000
      Re: Using SMS for password reset. Bob Eager <news0009@eager.cx> - 2024-01-31 00:10 +0000
      Re: Using SMS for password reset. Julieta Shem <jshem@yaxenu.org> - 2024-01-30 22:30 -0300
        Re: Using SMS for password reset. kludge@panix.com (Scott Dorsey) - 2024-01-31 01:41 +0000
          Re: Using SMS for password reset. Julieta Shem <jshem@yaxenu.org> - 2024-01-30 23:09 -0300
            Re: Using SMS for password reset. D <nospam@example.net> - 2024-01-31 10:58 +0100
      Re: Using SMS for password reset. Sylvia Else <sylvia@email.invalid> - 2024-01-31 13:32 +1100

csiph-web