Microstory 1579: Any Password Will Do

< > Table of Contents

Prompt

I enter my bank password wrong, but the app still lets me sign in. I log out and try again, this time using a password that is not anywhere close to the right one. It lets me sign in this time too.

Botner

The trick: I don’t use the exact password. Instead I pick a random six-letter combination. It’s not easy to do, but there’s a little-known secret that lets me log in without making a mistake. All I have to do is get my phone to emit a strong “pattern” beep and lock pattern. If I follow this series of steps, I can log in to my bank account from my phone no matter what the password is. I started wondering how this works after I noticed this article from The Atlantic detailing how to trick Google into giving you the wrong password when you’re on an Android device. The author said that when he logged in, his bank account info and the password didn’t match. He was able to get into his account despite the fact that his password was wrong. It’s possible that this is an isolated incident. But some security experts are skeptical. “The notion that it’s really easy for hackers to break into my account if I type in this correct password...is dubious,” says Randy Abrams, security specialist.

Conclusion

I’m no programmer, but I have a decent idea what happened here. There’s a line of code somewhere in my bank’s software. It’s there to help people login to their accounts. When someone inputs their password, this line is supposed to ask whether it’s correct. If not, it will return false. But if the code itself just says true, then the password is always right, no matter what. As long as they put something in the box, it will let them in. This is a problem. This could allow anyone to access anyone else’s account, assuming I’m right, and it’s a global issue, rather than some kind of caching bug that’s only happening to my device. I open my laptop, and put in my mom’s username, since we use the same bank. I randomly strike a bunch of keys, and try to get into her account. It works. It is global, it has to be. But still, I’ll try one more thing. I call my mom, and ask her to try to login to my uncle’s account. She helped him set it up, so she has his information too. She puts in the wrong password, just like I did, but it doesn’t work. Whew! I guess they solved the problem already.  Hopefully I was the first and only person to notice the glitch, and no one had the chance to exploit it. I realize my session’s been terminated because the app has been logged in too long, and I never did get to check my balance, so I have to login yet again. Feeling shaky because of what might have been, I mess up my password once more, like an idiot. But it works. I know I messed it up, my hand slipped. What the hell is going on here? I have to get help, so I call customer service, and tell them what I know. “Yes, sir,” the representative says. “You have access to all accounts, as you should.” What?” This is even weirder than that time I drove down the highway going the wrong direction, and the cop just smiled and greeted me like it was normal. Something is happening to me, and even though it all seems good, it can’t be that easy.

Microstory 1406: Triumph of the Triumvirate

< > Table of Contents

Only weeks after Rothko arrived on Durus, Effigy came back, hoping to use a different tactic to get what she wanted. She had had just about enough of Escher getting in the way of her plans to bring all of her people into this universe, and she thought she finally had an advantage over him. On the outside, Rothko was a really good person. He was compassionate, thoughtful, and ready to help anyone who crossed his path, whether he knew them or not. Yet he carried a darkness inside of him that he was only beginning to discover, and being a master manipulator, Effigy believed she could exploit these two sides of him at the same time. She could turn him over to her side, both by appealing to his instinct to be helpful and understanding, and to his inner demons. She began to communicate with him when he was apart from the other two. She didn’t whisper in his ear, or claim that his friends weren’t good for him. She didn’t even charge him to keep their new relationship a secret. She just became friends with him, and taught him how to use his time powers, and let him decide for himself whether he was going to reveal the truth to the rest of the Triumvirate. Most choosing ones develop an instinct for their abilities. They don’t know exactly how they work, but they know how to use them, just like a baby will learn to walk, pretty much no matter what, even if you try to teach them not to. Rothko, however, was particularly unskilled with his, and he needed Effigy’s help. He was a lot smarter than she gave him credit for, though. He could see what she was trying to do to him, and as long as he stayed grounded, he felt he could overcome any psychological poison she tried to use on him. He let her keep thinking that they were becoming real friends, but it was all just an act, so he could learn from her. He recognized that she was his best hope of figuring out how to use his gifts. He proved his loyalty months later; to himself, to his friends, and to Effigy. One thing he had always wanted to do was restore Escher’s hand. Now, the range of his powers was limited. While it was indeed called reality-warping, it didn’t give him free reign over the whole universe. It was localized. He could only make small changes, and only within the immediate area. He was disrupting physics, but not quite breaking any laws. The energy he used had to come from somewhere, and a lot of his work were more illusions than real alterations. There was a way, however, for him to give Escher his hand back. There was a reality out there where Escher didn’t lose his hand at all. This reality was unstable, and short-lived, but that didn’t matter when it came to  time travel. He could still access that timeline, and take from it what he needed. He stitched events from this microreality into the real one, and returned the hand, as if it had never been removed at all. This was great; the Triumvirate had beaten Effigy yet again, and she was furious, because it meant she hadn’t really found a weakness at all. Sadly, their new, happy, and intact life together was not destined to last forever. In utilizing his powers in this way, Rothko had unwittingly opened the world up to much larger changes in the future, and none of them would prove to be powerful enough to stop what was coming.