Hacker News Reader

Comment by mensetmanusman | Hacker News Reader

Interesting. Stealing a phone in the future will also steal their voice and therefore activities like bank authorization.

View on HN

They already do that now. People are getting phished for their sms codes. As a side note, my local news just reported a big crime spree of people robbing cashless places. They have the manager log into the clover POS machines and issue refunds into their cards.

Criminals have been high tech for a while now

do they just run to the ATM afterwards?

Probably better to have someone else wait at an ATM ready to withdraw once they get a text message.

This is alarmist at best. Does stealing someone's iPhone today mean that you've stolen their passwords and everything else? No. Why would this change?

People are being held up and forced to enter more passwords, it is definitely rarer than previously because of the technical hurdles Apple has thankfully added.

It's just interesting thinking about edge cases and what a stolen phone will mean for your identity 10-20 years from now.

What kind of banks do authorization by voice?

HSBC has the option, I have never enabled it even though they continually push me to.

It's actually becoming more common. I'm not sure how many banks have implemented it, but I've called Spectrum about my internet and a "security" feature called Voice ID that lets you verify your identity with your voice was being advertised

Wonder if it's "perfect" enough for that or if they'll add some sort of audio fingerprint (like the invisible dots on the printers).

Schwab, and they are pushing it hard.

"At Schwab, my voice is my password"

Vanguard too.

It seems like all the brokerages got sold hard on this. I have a friend who did customer support for Fidelity and they also pushed the voice ID thing very hard. I think it was to the point they wouldn't help you until you set it up.

I have had Schwab accounts for over a decade and called them a couple times, and they didn't bug me about it. Would still prefer WebAuthn to log in, however.

Had Fidelity 401k from work I was trying to rollover to a Schwab IRA. Schwab mentioned setting up the voice password thingy, and I declined and had no further problem. Fidelity tried to push it on me before I could talk to anyone. I refused and had to dial 0 several times for it to transfer me to a person. Glad I no longer have a Fidelity account, if Schwab ever tries that BS I'll raise hell with them.

Fidelity does it too

American banks. Of course.

Fidelity does it. I've had to explicitly decline 'voice authorization' multiple times.

Besides, being able to send voice messages to third parties with someone else's voice is a security nightmare.

the australian tax office and various other entities use a vocal print of “in australia my voice identifies me” i wish i was kidding

https://amp.theguardian.com/technology/2023/mar/16/voice-sys...

What if you don’t speak English? I guess it wouldn’t really matter but if you were leaning English it might not work with better pronunciation later.

‘My voice is my passport please verify me.’

“…You’re right. I can’t kill my friend.”

::turns to goon::

“Kill my friend.”

Pretty sure that gov.uk uses or used voice authentication.

Banks certainly do: https://www.vice.com/en/article/dy7axa/how-i-broke-into-a-ba...

Some "partners and customers" listed here:

https://www.pindrop.com/whos-it-for/banking-finance

In general, financial institutions (such as the many multi-nationals and regionals that use this) don't want to talk about the specific providers they use, so it can be hard to get a comprehensive view of which are using what.

But everyone who is anyone in banking evaluated this provider, for example.

Now you can steal someone's fingerprints, DNA, phone, and voice all at the same time. Efficiency!

And enable fake ransom calls. What will we be able to trust?

Reply on news.ycombinator.com