Re:How to Safely Store Your Users' Passwords in 2016
by pjungwir on Thursday February 18, 2016 @12:01AM
(#11123828)
I loathe security questions too, but those aren't even that bad! My credit union's default security question is "What was your first musical instrument?" I wonder how many guesses you get?? I always answer these questions with a long string of random characters.
[ Parent
| on HN ]
Re:How to Safely Store Your Users' Passwords in 2016
by dheera on Thursday February 18, 2016 @09:54AM
(#11126108)
LOL, check their Facebook pictures and see if they are playing an instrument in any of them. Most people don't play more than 1 instrument, so it's probably their first.
Re:How to Safely Store Your Users' Passwords in 2016
by jtheory on Friday February 19, 2016 @01:51AM
(#11132040)
How many common "first instruments" are there for kids? Maybe 5? There's a pretty good chance you'll get it right without doing any research whatsoever.
It's not quite as bad as asking "what species was your first pet?" but not much better.
This is the real problem with security questions; the answer space is often so very small, and can be narrowed down even further with a little research.
Questions like "what was the first name of (your maternal grandmother, your first best friend, etc.)" are very common -- well, there are stats on most popular first names of given generations in different places. If you know what country the person is in, you can make a good guess at these.