Path: utzoo!mnetor!tmsoft!torsqnt!hybrid!scifi!bywater!uunet!bu.edu!telecom-request
From: Barton.Bruce@camb.com (Barton F. Bruce)
Newsgroups: comp.dcom.telecom
Subject: Re: 800 Numbers, Voice Mail, and Privacy
Message-ID: <74429@bu.edu.bu.edu>
Date: 11 Feb 91 02:21:10 GMT
Sender: news@bu.edu.bu.edu
Organization: Cambridge Computer Associates, Inc.
Lines: 36
Approved: Telecom@eecs.nwu.edu
X-Submissions-To: telecom@eecs.nwu.edu
X-Administrivia-To: telecom-request@eecs.nwu.edu
X-Telecom-Digest: Volume 11, Issue 109, Message 10 of 10


In article <74338@bu.edu.bu.edu>, gast@cs.ucla.edu (David Gast) writes:

> If you call 1-800-544-7544, you can get complete information about the
> fund holdings in Fidelity Funds of anyone whose social security number
> you know.  

Another silly case of someone's stupidity in implementing something
that gives telephone based applications a black eye.

Here in Boston, the now in trouble Bank of New England has a horribly
stupid scheme. Your checking and savings account funds can be remotely
transfered back and forth, and the current balances read by almost
anyone.

99%+ of Mass drivers have their SSN as their drivers license #, and
virtually every merchant accepting a check over the counter writes
your drivers license on the back.

The last four digits of your SSN are your PIN, and so a typical
merchant can easily dial that bank's computer, enter your account
number and PIN (both on your check at this point), and, noting that
you are a tad short on checking account funds, simply move some from
your savings to your checking.

The bank has NO way to let you specify an alternate PIN. All accounts
get phone access by default. The only suggestion they had when I
pointed out the stupidity of this was to suggest that they could
disable the service for customers so requesting!


[Moderator's Note: First National Bank of Chicao has such a 'bank by
phone' system here, but you pick your own PIN and are encouraged to
change it frequently. FNB / Chicago may be going down the tubes soon 
along with Continental Bank (for the second time!) but at least they
are security concious.   PAT]