3 ms·
The first part of the article actually more highlights the fact that security questions are often blindingly insecure. Often a service which uses security quest
by camtarn 16y ago
The first part of the article actually more highlights the fact that security questions are often blindingly insecure. Often a service which uses security questions will provide a list of available questions, some of which would open an account to easy attack if used (e.g. "What is your car registration number?") and many services do not allow a custom question to be supplied.
- larrik 16y agoWhile I agree with the sentiment, I find it surprising how much longer these questions/answers last than the facts I used to answer them. Even "what is your phone number," I have to think back to the 10 phone numbers it COULD be. "What is your favorite car?" Well, usually my current one, so WHEN did I create this account?
- EGreg 16y agoThe trick is not to answer the question they're asking you. Think of something permanent like "who was your favorite teacher in high school" and stick to that for EVERY question.
- pasbesoin 16y agoEssentially, a second password that you may have to enter multiple times. (And that the host may store and/or present -- at least internally -- in cleartext (or a less protected format), depending upon their practices. So, beware if you start / of doing this across different sites.) What particularly irks me with regard to security questions with many hosts is the absence of an opt out. Here's this security weakening feature, and you must participate! (I understand is saves them support time/labor on the front end. A bargain with the devil.)