Hacker News Reader

I had to talk to rogers about getting some money back after finally cutting all of my services with them.

Because my old cellphone number was the account number, they started giving me information about the Department of National Defense employee who now owns my old cell phone number.

Hows that for a security failure on Rogers' part?

View on HN

I experienced another security failure on Rogers' part: Just a few weeks ago I was able to reset the passcode on my Rogers cell phone account by supplying just my cell number and date of birth. This was through an automated system and no other information was requested. I wasn't even phoning from the cell phone; I was phoning from a landline that isn't associated with my Rogers' account in any way.

Would have been interesting if you wrote that persons information down and gave him a call to let him know what just happened. It's make a great story for the press and could pressure Rogers to stop this information leak and otherwise poor security policies.

Reply on news.ycombinator.com