undefined | Better HN

0 pointsjrochkind112y ago0 comments

If their policy is that support staff should never be able to change an accounts email address... why does the system let them do it?

0 comments

IgorPartola12y ago

At some point someone has direct DB access and can do this. Sure, normal support people don't but this just makes the social engineering aspect a bit more complex, not impossible.

j / k navigate · click thread line to collapse

0 pointsjrochkind112y ago0 comments

If their policy is that support staff should never be able to change an accounts email address... why does the system let them do it?

0 comments

IgorPartola12y ago

At some point someone has direct DB access and can do this. Sure, normal support people don't but this just makes the social engineering aspect a bit more complex, not impossible.

j / k navigate · click thread line to collapse