4 ms·
I want my password store to be able to generate these for me. Then it would a variation on "correct horse battery stable". > unless they see the answer in pla
by mseebach 14y ago
I want my password store to be able to generate these for me. Then it would a variation on "correct horse battery stable".
> unless they see the answer in plaintext
I think they do.
- pavel_lishin 14y agoThat might actually be an interesting feature add-on. http://i.imgur.com/9LYi9.png http://i.imgur.com/9LYi9.png
- mseebach 14y agoAnd to avoid being faced with trying to explain how your mother was born to a ... rather eccentric family, it would be cool if it could generate something that's plausibly a family name, pet name, car, mascot, teacher's name etc. Good thing about security questions is that they don't have to stand up to offline attacks, so a few tens of thousands of options for each might well be sufficient.
- pavel_lishin 14y agoAn option for names could be a pretty good choice, but after that, the number of options could balloon. Mascot, pet's name, car brand, street name, TV show, city, etc., etc. You won't catch every edge case. If I'm talking to someone on the phone and giving them my secret answer, I doubt they're going to be giving me the third degree about why my mother's maiden name is "antireligious electrocardiograph", especially if the computer accepts it.