Post your comments for Sites' Personal Questions May Pose Security Risk here
Page 1 of 1
Sites' Personal Questions May Pose Security Risk
#2
Posted 04 April 2008 - 07:28 PM
I use a password generator to create random answers such as "b93kG.0spQ" for the security questions. I store all account information on a flash drive, then copy and paste the required information onto the website. The flash drive is only plugged in when I need it; Zone Alarm blocks intruders; 'copy and paste' thwarts key-logging app's; the only thing I have to remember is to unplug the flash drive; and no one gets my mother's maiden name.
#3
Posted 06 May 2008 - 06:12 AM
I've been wondering something for a while. Maybe someone out there can answer. Mr Roberts?
Instead of providing us with limited number of preset questions, why are these organisations not providing us the ability to define both a question of our own choosing and it's associated answer? Thus I could set up a very personal security question, for example:
What's the surname of the first girl I kissed. Or, who was it at primary school who "didn't even know the meaning of life"?
Is it because it would require double (or more) the storage capacity? But storage is cheap these days, and surely it's worth it for the additional security.
Instead of providing us with limited number of preset questions, why are these organisations not providing us the ability to define both a question of our own choosing and it's associated answer? Thus I could set up a very personal security question, for example:
What's the surname of the first girl I kissed. Or, who was it at primary school who "didn't even know the meaning of life"?
Is it because it would require double (or more) the storage capacity? But storage is cheap these days, and surely it's worth it for the additional security.
#4
Posted 22 May 2008 - 06:49 PM
I am seeing what you suggest slowly coming into use. That might be good news for us all.
#5
Posted 09 June 2008 - 09:55 AM
Just because a site asks for your mother's maiden name does not mean you cannot type any answer there (so long as you remember it).
My mother's maiden name, and the name of my first pet, change all the time.
What does irk me is when the answer cannot have numbers in it. It would be much more secure if my mother's maiden name could be 'LEDZEPPEL1N2001' for example.
My city of birth has been 'JUP1TER' in the past too!
Just do not lose the password crib sheet - either keep it on an USB key, (like bostonfm) or a nice secure piece of paper in the back of a book somewhere safe.
A friendly alien...
My mother's maiden name, and the name of my first pet, change all the time.
What does irk me is when the answer cannot have numbers in it. It would be much more secure if my mother's maiden name could be 'LEDZEPPEL1N2001' for example.
My city of birth has been 'JUP1TER' in the past too!
Just do not lose the password crib sheet - either keep it on an USB key, (like bostonfm) or a nice secure piece of paper in the back of a book somewhere safe.
A friendly alien...
#6
Posted 22 July 2012 - 06:42 AM
A lot of these security questions could also be easily answered by a sibling, parent, other family member, or close friend. And many people who knew you in the past could have known your first pet's name, your mother's maiden name, etc...so, a lot of people you know (even former friends seeking possible revenge after a breakup?) could easily hack into your account once you enter a security question. I think it actually makes your account a lot more easy to gain access to.
Share this topic:
Page 1 of 1
Help











