3 ms·
I use something like this: “the secret password is tango-seven-alpha-romeo-zero-zero-victor-sierra-foxtrot-quebec". Never had to use these for real yet, but it
by metafunctor 8y ago
I use something like this: “the secret password is tango-seven-alpha-romeo-zero-zero-victor-sierra-foxtrot-quebec".
Never had to use these for real yet, but it should be a bit harder to be seen as a “a bunch of gibberish”.
- ceejayoz 8y ago"Oh shoot, it was a bunch of random words. I'm so sorry, I had it written down but I can't find the paper..." Remember, an attacker can call support hundreds of times, getting a different rep every time. There's a good chance it'll work eventually.
- metafunctor 8y agoSeems to me like that’s not really a criticism against using random answers for secret questions.
- ceejayoz 8y agoClearly random answers are a problem. You're going to find support reps inclined to accept "oh it's just something random", which means you're guaranteed get compromised if you're a big enough target to spend some hours on. Random but outwardly appearing valid ones are fine (but you'd want to avoid using the same answer on different sites). One site's "first car" could be Porsche 911, another's Aston Martin. Both aren't true, but the support rep doesn't know that.