3 ms·
Exactly. But having to come up with fake answers to stupid questions and track them, is just proof of how bad some people are at their job. Apple still does th
by cmurf 9y ago
Exactly. But having to come up with fake answers to stupid questions and track them, is just proof of how bad some people are at their job.
Apple still does this kind of crap. Actual questions:
In what city did your parents meet?
What is the first name of your best friend in high school?
Recently an airport public WiFi in a major city in Europe wanted my birthdate and the agreement language said that I acknowledge everything I'm stating is true and correct. It's so blatantly asinine. I didn't even bother to look if it cited some EU law that lying is a crime, I just said fuck it, and went without Internet for a few hours.
- ryannielsen 9y agoApple still does this kind of crap. Not for users who've opted into two-factor authentication: https://support.apple.com/en-us/HT204915 https://support.apple.com/en-us/HT204915 From the page: Do I still need to remember any security questions? No. With two-factor authentication, you don't need to choose or remember any security questions. Your identity is verified exclusively using your password and verification codes sent to your devices and trusted phone numbers. When you enroll in two-factor authentication, we will keep your old security questions on file for two weeks in case you need to return your account to its previous security settings. After that, they will be deleted.
- MzxgckZtNqX5i 9y agoOne thing that really drives me crazy is that Apple asks me my security questions even if I enter my correct password because I haven't logged in for a while. I didn't saved the answers (and this is my fault) but anyway I would have done it in the KeePass database that contains also the password, so no additional security.
- zepolen 9y agoThey do that to remind you of the security answers. Still a broken model over all.
- MzxgckZtNqX5i 9y agoThey could prompt you with the security questions as some other services does for master passwords for example, but usually there's the possibility to skip it. Now I'm locked out even though I know both username and password: this is BIG logic flaw in my opinion.