How to fill out security questions.

7 years ago

Previously, previously, previously.

Tags: , ,

7 Responses:

  1. Blerik says:
    7 years ago at 3:08 am

    I use this command to generate the answers for me:

    openssl rand -base64 48

    Nice and short, no dependencies because usually openssl is installed on Linix/Mac.
  2. Not Frank says:
    7 years ago at 4:41 am

    I recently ran into some airline's website that indicated that they wanted to "add two-factor security." What they actually meant was offer security questions, and both the questions -and- the answer options were in drop-down boxes, meaning you had to go with one of the canned answers.

    Frankly, if it's going to be something I have to be able to remember without reference (which comes up occasionally) yet somehow be identifying of me, I'd rather pick my own questions and make them in-jokes. It's much more likely that someone can dig up my first pet's name, species, and breed than the answer to some 6th-grade in-joke like "What does Deza say?"
  3. Teddy says:
    7 years ago at 4:54 am

    Note that RFC 4122 says "Do not assume that UUIDs are hard to guess; they should not be used as security capabilities (identifiers whose mere possession grants access), for example.". It does not make any exception for UUIDv4. Sure, use of UUIDv4 strings for this purpose is very common, but there it is.
  4. CJ says:
    7 years ago at 6:46 am

    I remember being on the phone to reset my password for a site and having to confirm to the human at the other end of the line that my mother's maiden name really was "BQBXJV7XpQxX50HO" or whatever.

    You know, of the Long Island BQBXJV7XpQxX50HOs.
  5. LIcaon_Kter says:
    7 years ago at 9:35 am

    You all know they'll store that in plain text, right?

Comments are closed because this post is 7 years old.

  • Previously