4 ms·
Useful advice via http://notes.kateva.org/2012/08/net-security-is-completely-broken.html http://notes.kateva.org/2012/08/net-security-is-completely-b...: 'We n
by chmars 14y ago
Useful advice via http://notes.kateva.org/2012/08/net-security-is-completely-broken.html http://notes.kateva.org/2012/08/net-security-is-completely-b...:
'We need to give Schneier a few drinks and get him to talk about this again. Failing that:
Backup for Darwin's sake.
Don't enable remote wipe of Mac OS X hardware. Just encrypt it.
Use Google two-factor (two-step verification) if you are a geek and can stomach it.
Fear the Cloud. Keep the data you value most close to you.
Don't use iCloud.
Don't trust Apple to get anything right that involves the Internet and/or Identity.
Not being Schneier my advice isn't worth much, but fwiw I suspect the "solution" is:
Get rid of the secret security question.
Strictly limit password resets. If someone lost last access, charge them $50 to go to bank, post office or notary to establish their identity.
Incorporate biometrics (thumb print and speech probably).'
- rmc 14y agoSome regions have data protection laws. This means in some places the standard security questions (like "What's your mother's maiden name?") are not enough to protect people's personal data. (Which is good). However such laws also include access. You cannot use disproportionate means to require access. Biometrics would probably not be legal to protect things like photos etc.