3 ms·
I did something like this recently. I got to enter my own secret question and set it to "What's the usual?" meaning my usual password. Note, that this wasn't th
by CountHackulus 16y ago
I did something like this recently. I got to enter my own secret question and set it to "What's the usual?" meaning my usual password. Note, that this wasn't the password I was using for the site.
Fast forward a few months, and I call the site's billing department. The decide to verify my account by asking me my secret question. Queue the CS rep on the other end being extremely confused when I successfully name out a long string of characters that he thought was just corrupt data.
- parfe 16y agoYour method is likely storing a plain text string that would grant access to other accounts you own.
- CountHackulus 16y agoTrue, but they're all throwaway account I don't care about. Things I do care about all have their own unique password. Excellent point about the plaintext though.