Authentication

How do you prove you are who you say you are to a computer, website, or your bank? Test your customers and co-workers. Perform a trial social-engineering attack on them and see whether they fall for it. “John, a new security update has just been issued. I am remotely upgrading your router but I forgot your password. What is it?” How about testing a co-worker via txt? (Get permission, first.) im @wrk. ur “sick.” lckyduck. wht is d pw 4 d xchng svr? i frgt. Updts lst nght! Needs rstrt... lk rght frkn nw! HLP! If they fall for it, let it be a sobering learning moment for them. Who was on your phone, for real? It is also a sudden necessity to change that now compromised password.