4 ms·

I think the bigger point is that a ton of signups use this question. Whether you say 'Mr. Smith' or 'Pecan Pie' isn't going to save you if you use it for all o

by Steko 14y ago

I think the bigger point is that a ton of signups use this question. Whether you say 'Mr. Smith' or 'Pecan Pie' isn't going to save you if you use it for all of them.

dhimes 14y ago
Actually, you often get to pick your question. If they don't hash the answer, however, you're screwed. It seems doable to me: drop on non alphanumeric (or something), split on whitespace, trim, lowercase, put back together. It beats the hell out of putting in the "right," googleable, answer. Sarah Palin can attest to that.
- Steko 14y ago
  Getting to pick your own question in my experience is rare. We've already gone over the possible reasoning for not hashing the answer.
- duaneb 14y ago
  The only company I use that allows me to pick my security question is google. Apple doesn't, my bank definitely doesnt.
  - warp 14y ago
    At appleid.apple.com I can pick from a list of 15 security questions or use a custom one.
  - duaneb 14y ago
    Strange - I have only preset questions.