Hacker News Reader

I think that was just an example; it just needs to be some daily changing token. When a bad guy calls up your company, he should have no idea whether you use a color scheme, mythical animals, sports teams or flightless birds.

View on HN

Your definition of "bad guy" strangely seems to exclude disgruntled former employees.

You're right, I didn't think about that.

If it's a former disgruntled employee then they shouldn't know what the daily token is, since they should at that point be gone and no longer have access to such details.

If they do, however, know the token, then you have another problem altogether.

But they'll know the general scheme, which would help them extract the current day's code.

Unless the color is random each day, which would make more sense wouldn't it?

"Hi, this is Paul from IT. We're having some trouble with the random color generator today, could you pop open a browser and check for me? It should be pink, but we've gotten a couple of calls saying it was a different color. What color are you seeing at your location?"

Or disgruntled current employees.

Reply on news.ycombinator.com