Alipay responds to password modification vulnerability: it will only be implemented in specific cases

　　On January 10, in response to the vulnerability of netizens in modifying password login by acquaintances, Alipay responded that this method will only be implemented in specific circumstances.

　　Alipay said that this strategy can only retrieve the login password, and the payment password cannot be retrieved by answering security questions only. And once the user Alipay is logged in to other devices, his device will receive a notification and reminder.

　　At the same time, Alipay has further improved the security level of the risk control system. Currently, only on the user's own mobile phone can you retrieve the login password by identifying recently purchased products and identifying his friends. You cannot use this method to retrieve the login password through other mobile devices.

　　The following is Alipay’s official response:

　　We have received a report from netizens that we can retrieve the Alipay login password by identifying friends and identifying items purchased recently.

　　This method is only implemented in certain circumstances. Normally, users need to at least enter the SMS verification code to retrieve their login password. For some users who are temporarily unable to receive text messages or those who change their mobile devices, our risk control system will first evaluate (such as the completeness of account information, network environment and other factors). Only when the security factor is high can the user answer a series of security questions, and the login password can be modified only after the answer is correct.

　　This policy can only retrieve the login password, and only answer security questions and cannot retrieve the payment password. And once the user Alipay is logged in to other devices, his device will receive a notification and reminder.

　　In order to better improve the user's sense of security, after receiving feedback from netizens, we have further improved the security level of the risk control system. Currently, only on the user's own mobile phone can you retrieve the login password by identifying recently purchased products and identifying his friends. You cannot use this method to retrieve the login password through other mobile devices.

　　We also welcome users to continue to provide opinions and suggestions on our security policies, and we will further improve and correct them based on everyone's feedback.

　　Thank you for your attention and support to Laogao Crown Club . Please indicate the source for reprinting by Xuanming Network www.shxuanming.net