HNHacker News
TopNewBestAskShowJobs

site-dot-onion

3 karma · joined April 12, 2016

submissionscomments
site-dot-onion··on Namecheap live chat social engineering leads to loss of 2 VPS
So full of failure, this thread.

No, it is never okay to compromise security just because "it's good when you forget your password". There should be no way around this for any reason; a bypass via SE or any other mechanism is a failure of the company, end of. If you forget your password or you do not have your 2FA/security questions available, tough, you should lose access.

For the sake of "workarounds for legitimate users", that just translates to "a security hole".

Special pleading is a logical fallacy and if it works on a support rep, that rep has failed at their job.