FlyerTalk Forums - View Single Post - UA initiates Account Security Update (Security Q&A authentication added 2016)
Old Aug 22, 2016, 8:27 pm
  #479  
ssh
 
Join Date: Jun 2007
Location: Boulder, Colorado
Programs: UA 1K (MM), MR Plat Prem, Hertz Pres
Posts: 1,164
Originally Posted by ksiu1
Seriously United? I'm a IT security professional and not only have you made this whole process incredibly frustrating for users, you haven't made it any "safer"

Two different phone calls with their associated hold times to unlock my account. And what's with these "security" questions anyway? They look like questions made up by the marketing team. If you're going to do 2 factor, just do it right. Not this crap.
At least they aren't questions you could learn about someone else just by being Facebook friends. Or Twitter followers. Or...

Oh.

Wait.

Never mind.

As has been noted, 2FA, this ain't. Secure, this ain't. This is only user hostile, and that does not make for good security. Why not just jump on the Google authenticator bandwagon and be done with it?
ssh is offline