• mozz@mbin.grits.dev
    link
    fedilink
    arrow-up
    12
    ·
    4 months ago

    call recordings

    your phone password

    Can you explain more about this? You’re saying the bank app is grabbing this data from your phone, or what are you saying?

    I’m not saying you are wrong, necessarily, I’m just surprised to hear it

    • iSeth@lemmy.ml
      link
      fedilink
      arrow-up
      9
      ·
      4 months ago

      Not the password to unlock your phone, but the credentials your bank may require to verify your identity over the phone. A security question/answer, a passphrase or a sequence keyed during the call.

      • manualoverride@lemmy.world
        link
        fedilink
        arrow-up
        5
        ·
        4 months ago

        This is correct, i should have said “telephone banking password/passcode” but also the security questions are at best hash encrypted (so basically plain text). I had thousands of hours of call recording and millions of customer details on my work laptop all unencrypted. The security for enterprise telephony companies is seriously lax, I wouldn’t be surprised if a few unexplained leaks originated from these companies.