3 ms·
If that's true, I think it's very interesting. I wonder if the security community will step up and take advantage of this opportunity to discuss the inherent s
by jnovek 18y ago
If that's true, I think it's very interesting. I wonder if the security community will step up and take advantage of this opportunity to discuss the inherent security issues with the "secret question" method of account recovery.
- khafra 18y agoBruce Schneier's one of the more prominent security writers around, and he covered that one over three years ago: http://www.schneier.com/blog/archives/2005/02/the_curse_of_th.html http://www.schneier.com/blog/archives/2005/02/the_curse_of_t... Where I work, all webmail is blocked, so the IA department is grateful to Palin for the object lesson supporting the policy.