4 ms·
"encrypted or unencrypted security questions and answers" This is bad right? Like, worse than your hashed password and your mailing address. The only good thi
by St-Clock 10y ago
"encrypted or unencrypted security questions and answers"
This is bad right? Like, worse than your hashed password and your mailing address.
The only good thing is that if I ever implement security questions, I'll remember Yahoo! and how it could end up in the wrong hands.
- nilved 10y agoDon't implement security questions. Those are no good to begin with.
- graeme 10y agoDon't many sites require them?
- sushid 10y agoYes but the parent is telling you, as a developer, don't use them. Personally, I'll make up a fake answer (e.g. What's your favorite pizza topping? A:338192). Just make it something reasonably short as you might have to repeat it to a live customer service agent.
- pbhjpbhj 10y ago"My fave pizza is colon backslash open-cursive-brace pipe ay eight dollar with cheese".
- satysin 10y agoYou mean asking me my mother's maiden name or what school I went to isn't bullet proof?!
- Thrymr 10y agoUnited Airlines implemented them as multiple choice dropdowns: http://www.slate.com/articles/technology/future_tense/2016/03/united_airlines_uses_multiple_choice_security_questions.html http://www.slate.com/articles/technology/future_tense/2016/0...