Alipay reveals a vulnerability, how should you protect account security?

[Abstract] This morning, the network uploaded a security hole about Alipay. In daily life, how can we avoid risks?

Earlier today, the online discussion pointed to Alipay's security risks: As long as you know Alipay account, recently purchased goods, and Alipay friends, you have a chance to log in to Alipay's account. The AppSo survey also successfully crashed into 3 Alipay accounts.

Alipay official stated that it has increased the security level:

This approach will only be implemented under certain circumstances. Under normal circumstances, users need to enter the SMS verification code at least to retrieve the login password. For some users who are temporarily unable to receive SMS or users who replace mobile devices, our risk control system will first assess (such as account information integrity, network environment and other factors). In the case of a high security factor, the user is allowed to answer a series of security questions. Only after the answer is correct can he change the login password.

This strategy can only retrieve the login password, only by answering security questions and cannot recover the payment password. And once the user Alipay is registered on other devices, my device will receive a notification reminder.

In order to better enhance the user's sense of security, we received further feedback from netizens and we further improved the security level of the wind control system this morning. At present, only on the user's own mobile phone, the user can retrieve the login password by identifying the most recent purchase and identifying his/her own friends. The password cannot be retrieved by other mobile devices.

Property security is something that everyone cares about. Here's what you need to know about it and some of the security measures we can do on weekdays.

How to answer the question on how to retrieve the login password?

First, enter your Alipay account and retrieve your password. Alipay will automatically send a verification code to your bound phone.

Click "Unable to receive SMS" at this time. Alipay will change the password for you. One way is to "choose purchased products" and "people you may know."

After the selection is completed, you can set a new login password and log in to your Alipay account.

The resetting of the payment password can also be done through "people you may know". (This verification method is currently turned off)

Where are these risks?

If someone has a good relationship with you, or you usually like to record life on online platforms such as friends, you can say that your account is easier to be logged in by others.

Because of this, the required conditions are:

Know your Alipay account: If you are an Alipay friend, you can view it directly on your personal page;

Know what you've bought: I believe many people who like to receive courier will like to send a circle of friends. If they are daily products (such as shoes), they will use it every day.

Know your Alipay buddies: If you select "Public My Friends" in "Settings" - "Privacy", then you can see all your other friends as long as you become Alipay's buddy (currently the setting is off by default).

Even if you did not publicly pay Alipay friends, but because Alipay friends are mostly real name nicknames, so if the other party has a good relationship with you in daily life, there are still some chances to choose to succeed.

According to Alipay’s reply, only the user’s own mobile phone can retrieve the login password in this way. We believe that we can still reduce considerable risks.

Everyday, how can we avoid risks?

1. Pay attention to mobile phone text messages and report them in time

At this time, you can select "Quick Report" in "My" - "Settings" - "Security Center" - "First Aid Kit". After the loss is reported, "The funds cannot be accessed. No one can log in."

2. Purchase Alipay account security (price: 2 yuan)

Choose from "My" - "Insurance Services".

3. Set higher difficulty security issues

Open https:// and click on the "Security Center" - "Protection Account Security" - "Security Password" settings.

4. Reduce the amount of flowers

Adjust the amount of spend from the highest to the amount you need, and in case the account is really stolen, you can minimize the loss. You can set it in "My" - "Ant Flower" - "Settings" - "Credit Settings".

If you have more suggestions, please feel free to add it at the commentary.

[This article comes from the Tencent News client from the media, does not represent the views and positions of Tencent News. 】

AC Servo Motor

Ac Motor,220V Servo Motor,Ac Motor With Speed Controller,Remote Motor With Speed Controller

NingBo BeiLun HengFeng Electromotor Manufacture Co.,Ltd. , https://www.hengfengmotor.com