Hacker News Reader

Comment by nickdothutton | Hacker News Reader

There really ought to be a stronger sign of confirmed identity in business calls. Something cryptographic. Every single day I end up in business calls randomly scattered across teams, WhatsApp, FaceTime, zoom, and a half dozen other systems. Instead we get stupid cartoon avatars and the ability to put a funny backdrop behind us.

View on HN

I'm not sure if we have good enough systems in place, in terms of UX, for that to work.

Imagine every C-level exec who's opened a top-urgent ticket with IT because their printer doesn't work (they forgot to plug it in/forgot it needs paper/it's not a printer, it's a paper shredder) trying to operate some form of key exchange software securely, while people capable of pulling off this sort of scam are targeting them.

I don't think this is a problem that can be solved with technology.

This doesn’t sound correct, why can’t it be solved with sufficiently advanced technology i.e. software and devices?

We already have facial verification systems in hundreds of millions of devices that are genuinely very difficult to spoof.

> with sufficiently advanced technology

Oh, you mean magic? :P

Wanna see a magic trick ?

These $25M... waves hands gone !

A 2 of 3 key authorization would have gone a long way to preventing this.

Zoom has MFA, including YubiKey.

Then they shouldn't be C-level execs. We should expect more proficiency from people we pay so highly.

I had to get on a Teams meeting the other day and it took me 15 minutes. And I've worked in technology for 30 years.

For many of these "attacks", it could be thwarted as simply as opening the messages tab and seeing no prior history.

Is PGP out for this use case?

Doesn't the US military have DoD people plug in their ID badges to read/sign emails through outlook?

Reply on news.ycombinator.com