8 ms·
What is your mother's maiden name? T3m92uGKhWMRV7Um0WVF50LKQNowpoe0FWwWryL2r9jkuAHyLTCY8QoY79iMiSjo6CHCZGWl
by jonathantm 10y ago
What is your mother's maiden name?
T3m92uGKhWMRV7Um0WVF50LKQNowpoe0FWwWryL2r9jkuAHyLTCY8QoY79iMiSjo6CHCZGWl
- moo360 10y agoOf the Greenwich T3m92uGKhWMRV7Um0WVF50LKQNowpoe0FWwWryL2r9jkuAHyLTCY8QoY79iMiSjo6CHCZGWl's ?
- rezashirazian 10y agoI laughed too hard at this.
- Klathmon 10y agoWhich only works until you call in asking for a password reset and when they ask you the question you just say "I just hit the keyboard a bunch".
- mikestew 10y agoNo, I pull up the answer out of 1Password and read it off to them.
- Klathmon 10y agoSorry, I meant to imply that the support person will hear the explanation and let you reset the password without the actual answer.
- roywiggins 10y agoDiceware is a decent option for security questions. They work fine over the phone.
- mikestew 10y agoFair enough, as I believe I've had that happen. Random string for one of my financial institutions, needed to reset something. Pull up 1PWD, with random string at the ready and...they asked me questions that could have been pulled from a copy of my credit report. I didn't ask, so I'm not entirely sure, but I wonder if they didn't look at the answer, said to themselves "fuck that" and went with Option #2.
- astrodust 10y ago"Charlie capital-echo lima peru capital-october..."
- Forlien 10y agoI thought Klathmon was pointing out say that they an attacker could say that they just mashed on the keyboard and that would be good enough for the fallible human on the other end of the phone. Anecdotally, I had a time where I couldn't remember may answer to a secret question except that it was a type of food. I called in and the human on the other end let me reset my password with just that explanation. Take that for what you will, but it seems like if someone knows you use passwords that are random strings, they can use that to break in.
- deleted 10y ago[deleted]
- deleted 10y ago[deleted]
- deleted 10y ago[deleted]
- ocdtrekkie 10y agoBut when the security question answers are leaked in plain text, they can still use it to get into your account.
- weinzierl 10y agoWait until they introduce a real name policy...
- djsumdog 10y agoI hate it when I'm asked this in person at banks and shit. "Your mother's maiden name has four numbers in it?" "It's a password. You should never use real answers for security questions."
- WillPostForFood 10y agoIt's a good strategy, but a pain when you have to tell them over the phone.