3 ms·
> Password reset is answering the date of birth and security question challenges (often easy to break using publicly available data – birthdays and favorite sp
by city41 12y ago
> Password reset is answering the date of birth and security question challenges (often easy to break using publicly available data – birthdays and favorite sports teams, etc. are often not secrets)
I really dislike this trend of "personal questions" to reset your password. The first car I owned or where I'd like to retire is easily obtained information. When are websites going to stop doing this?
I answer these questions using passwords generated from 1Password. So basically I have 4+ passwords per sites that use these questions. Very annoying.
- shampine 12y agoWhat about just using a basic cipher for your questions? It is what I do. So if the question is "What was your first car?" Answer could be: Ford Instead it is Enqc or droF or Gpse
- TeMPOraL 12y agoWell like many such website "security" practices, if you know why they're bad, they are no longer a problem for you. But normal people don't know why security questions are a stupid idea, so when an otherwise reputable website (like an e-mail provider) asks you for your first car or favourite toy, they assume it's how things are supposed to be on the Internet.
- ja27 12y agoI'm moving to nonsense and random answers stored in Lastpass but what I had been doing is just answering them as if I were one of my friends. I have a dozen friends where I know most of those answers.