How I Lost My $50,000 Twitter Username external
It’s hard to decide what’s more shocking, the fact that PayPal gave the attacker the last four digits of my credit card number over the phone, or that GoDaddy accepted it as verification.
This is absurd. We use and trust these services because they promise us security, when in fact they give up your extremely sensitive information to just about anyone who asks for it.
Read the part on how the attacker got a hold of Naoki’s last four digits of his credit card number, and how he used those to get into his GoDaddy account. “…most agents will just keep trying until they get it. “Ridiculous.