FlyerTalk Forums

FlyerTalk Forums (https://www.flyertalk.com/forum/index.php)
-   Marriott | Rewards (https://www.flyertalk.com/forum/marriott-rewards-427/)
-   -   New Marriott Security Measures (https://www.flyertalk.com/forum/marriott-rewards/1695150-new-marriott-security-measures.html)

jesternl Jul 17, 2015 2:33 pm


Originally Posted by KRSW (Post 25127920)
My gripe is that most 2-factor auths are done via SMS(Text message for the Yanks). Nice if I'm in my home country, but if I'm abroad I usually have yanked the SIM on my mobile and am using a local SIM instead. Also, depending on what I'm working on, my mobile phone might not be allowed to be carried with me.

So you are in an environment where a cellphone (oh, sorry, mobile phone for you non yanks :) ) is not allowed...I get that, I've been there, but access to Marriott.com in that same secure zone is not an issue? Not likely.

RogerD408 Jul 17, 2015 2:49 pm


Originally Posted by KRSW (Post 25127920)
...
My gripe is that most 2-factor auths are done via SMS(Text message for the Yanks). Nice if I'm in my home country, but if I'm abroad I usually have yanked the SIM on my mobile and am using a local SIM instead. Also, depending on what I'm working on, my mobile phone might not be allowed to be carried with me.

If this is a frequent issue, then maybe look into using a Google Voice number as your MR contact. I do believe you can pick up and send SMS messages via your laptop should the phone not be working or available.

I'm hoping the 2FA will be limited to redemptions only. Otherwise, it's an overkill for a loyalty program.

Texas Booster Jul 17, 2015 10:08 pm

I put a PIN on my account after a friend lots points for some bogus reservations. It isn't 2FA but it adds a slight delay for the question to be asked and answered.

I don't foresee a problem except overseas or in secure installations.

1P Jul 19, 2015 12:38 pm


Originally Posted by Kingston (Post 25126939)
Whether you use it or not, your UA account has a 4 digit PIN associated to.
All of them do, even if you didn't set it.
That 4 digit number and your MP # are all it takes to get in to your account.

This is completely untrue. United have spent the past year and more trying to
persuade me and many others to add a PIN to our accounts instead of/in addition to a password, just because pre-merger Continental customers had them. We have steadfastly refused to do so on security grounds. We have never had PINs and will not agree to invent them. My pre-merger United 2-digit 6-letter password is infinitely better security than any 4-digit PIN.

PHLGovFlyer Jul 19, 2015 3:19 pm


Originally Posted by jesternl (Post 25133467)
So you are in an environment where a cellphone (oh, sorry, mobile phone for you non yanks :) ) is not allowed...I get that, I've been there, but access to Marriott.com in that same secure zone is not an issue? Not likely.

It happens. A lot more often than you might imagine.

SkiAdcock Jul 20, 2015 6:43 am


Originally Posted by Texas Booster (Post 25134823)
I put a PIN on my account after a friend lots points for some bogus reservations. It isn't 2FA but it adds a slight delay for the question to be asked and answered.

I don't foresee a problem except overseas or in secure installations.

I added the 4-digit PIN security pin to my Marriott account so if someone (including me) tries to reserve an award ressie via phone then they have to provide the PIN. My password is also really long.


Originally Posted by 1P (Post 25140671)
This is completely untrue. United have spent the past year and more trying to
persuade me and many others to add a PIN to our accounts instead of/in addition to a password, just because pre-merger Continental customers had them. We have steadfastly refused to do so on security grounds. We have never had PINs and will not agree to invent them. My pre-merger United 2-digit 6-letter password is infinitely better security than any 4-digit PIN.

Agree. I've never had a PIN on my United account, although I heard that CO had them. My United password is really long & contains #s/letters. Will it totally protect against a brute force attack? No, but mine has a better chance of surviving it than someone who just has a PIN.

Cheers.

sethb Jul 20, 2015 8:00 am


Originally Posted by SkiAdcock (Post 25123515)
So basically Marriott is asking you to provide a phone number and email to get ready for their new authentication. Presumably if you already have that and you'r e happy with it there should be no problem.

Fwiw - I thought Marriott was going to ask for a stronger password. If hackers can already access my account, they'd already have my email and phone number.

There's a major difference between someone having (knowing) my phone # or email address, and them being able to read texts sent to them.

Kingston Jul 20, 2015 11:59 am


Originally Posted by 1P (Post 25140671)
This is completely untrue. United have spent the past year and more trying to
persuade me and many others to add a PIN to our accounts instead of/in addition to a password, just because pre-merger Continental customers had them. We have steadfastly refused to do so on security grounds. We have never had PINs and will not agree to invent them. My pre-merger United 2-digit 6-letter password is infinitely better security than any 4-digit PIN.

If you say so. It's the same IT system. My money is on you having one, whether you added one or not.

1P Jul 21, 2015 4:03 pm


Originally Posted by Kingston (Post 25145137)
If you say so. It's the same IT system. My money is on you having one, whether you added one or not.

My money says that if I tried to add my own, and I did actually already have one, the system would then lock me out....

JC5280 May 11, 2016 3:40 pm

I attempted a password reset and the whole "we will email you a code" thing put me in an errored loop. Now, when I attempt either the new or old password, I get an error message that they are experiencing technical difficulties. :rolleyes:

Mr. Vker May 11, 2016 3:50 pm


Originally Posted by JC5280 (Post 26611442)
I attempted a password reset and the whole "we will email you a code" thing put me in an errored loop. Now, when I attempt either the new or old password, I get an error message that they are experiencing technical difficulties. :rolleyes:

I am in good company. Same here. I called MR Cust Svc. Too much website traffic crashing servers. They can't tell me which password will work. Just that it should all shake out tomorrow. :rolleyes:

Jiatong May 12, 2016 6:18 am

+3, so true
 

Originally Posted by Jiatong (Post 25123145)
+3

Damn those web based MBA consultants who work for Mrt, they know how to run the meter !

Damn the MBA's at Mrt !

StevensFirstPrints May 12, 2016 7:05 am

I wish these loyalty programs had a way to disable "shop" redemptions, like buying a computer with points for example. I will NEVER trade my IHG or Marriott points for something like that.

RogerD408 May 12, 2016 7:27 am


Originally Posted by StevensFirstPrints (Post 26614226)
I wish these loyalty programs had a way to disable "shop" redemptions, like buying a computer with points for example. I will NEVER trade my IHG or Marriott points for something like that.

I doubt we will ever see a "build your own" program. I agree those are not great payback options. But I can see someone that has earned mega points and finds they have no way to burn them on stays, they may choose to use them to get something they don't want to spend $s.

Everyone has their own pluses and minuses. No need to cancel something just because it's no use to you. I'm not likely to stay at a RC property, so should they drop the brand?

StevensFirstPrints May 12, 2016 2:38 pm


Originally Posted by RogerD408 (Post 26614333)
I doubt we will ever see a "build your own" program. I agree those are not great payback options. But I can see someone that has earned mega points and finds they have no way to burn them on stays, they may choose to use them to get something they don't want to spend $s.

Everyone has their own pluses and minuses. No need to cancel something just because it's no use to you. I'm not likely to stay at a RC property, so should they drop the brand?



Just an idea, though I do think its a good one.


All times are GMT -6. The time now is 1:37 pm.


This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.