2 ms·
I treat all security questions as if they are just an additional password. I use a password manager and store a random string for each required security questio
by 55873445216111 5y ago
I treat all security questions as if they are just an additional password. I use a password manager and store a random string for each required security question.
- chrismorgan 5y agoYet even that becomes an social engineering attack vector, if you can talk to a human: “I just put random gibberish in there” is too likely to work.
- ghayes 5y agoYou could possibly use generated words to prevent that. "tenably-spelt-stall-proxy" shouldn't be considered "random gibberish."
- jrootabega 5y agoShouldn't, but it all depends on the training and awareness of the person on the phone. Instead of "random gibberish" the attacker could just say "random words", or, if they didn't know which strategy you used, "random stuff".