Three major weaknesses in call center authentication.