my favorite is my login for my phone needing me to authenticate i with… the authenticator… on my phone…. which to log into the authenticator…. requires me to verify using the authenticatior…
you call the IT department and i get an AI telling me that all password retrievals are done through the web portal, so it sends the password reset… to my email, accessed by my phone, that needs me to authenticate using the authenticatior…
the real answer it to lie to the AI to talk to a person and ambush them with a password reset and don’t take no for an answer.
i am currently 1 month behind on my required training modules about the importance of network security.
If your talking about a company like Apple, they can’t reset your password no matter what, they have no access. It is only controlled by the user unless it is an account recovery which takes days. (Which if a user creates an account recovery key, it takes it completely out of their hands). It’s a 28? Digit code that makes it so the password/account can never be recovered without that code and access to the phone number on the account unless there is still a device logged into that account you can change it from. You could have spent $8000 on the account for subscriptions/music/whatever, you won’t be able to access it ever again. All purchases lost
from what people told me who’s had this happen, even with a lost account recovery key it is possible to recover the account, it’s just apple doesn’t advertise it.
Basically it’s the same account recovery process but they nuke the accounts cloud(which is likely a deal breaker) prior to handing the account over. The issue is you can’t start that from a self service portal, it has to be originated from apple support and getting them to actually do it can be a pain because they don’t like to for obvious reasons.
also i believe Not having a method of account recovery that allows you to retain goods that was exchanged for monetary value would be concidered fraud so I would expect they are forced to have some way of retaining purchases as long as you can clearly identify yourself as the buyer
my favorite is my login for my phone needing me to authenticate i with… the authenticator… on my phone…. which to log into the authenticator…. requires me to verify using the authenticatior…
you call the IT department and i get an AI telling me that all password retrievals are done through the web portal, so it sends the password reset… to my email, accessed by my phone, that needs me to authenticate using the authenticatior…
the real answer it to lie to the AI to talk to a person and ambush them with a password reset and don’t take no for an answer.
i am currently 1 month behind on my required training modules about the importance of network security.
If your talking about a company like Apple, they can’t reset your password no matter what, they have no access. It is only controlled by the user unless it is an account recovery which takes days. (Which if a user creates an account recovery key, it takes it completely out of their hands). It’s a 28? Digit code that makes it so the password/account can never be recovered without that code and access to the phone number on the account unless there is still a device logged into that account you can change it from. You could have spent $8000 on the account for subscriptions/music/whatever, you won’t be able to access it ever again. All purchases lost
from what people told me who’s had this happen, even with a lost account recovery key it is possible to recover the account, it’s just apple doesn’t advertise it.
Basically it’s the same account recovery process but they nuke the accounts cloud(which is likely a deal breaker) prior to handing the account over. The issue is you can’t start that from a self service portal, it has to be originated from apple support and getting them to actually do it can be a pain because they don’t like to for obvious reasons.
also i believe Not having a method of account recovery that allows you to retain goods that was exchanged for monetary value would be concidered fraud so I would expect they are forced to have some way of retaining purchases as long as you can clearly identify yourself as the buyer
no it’s a company login.