The “Cobra Effect” that is disabling paste on password fields

Re:The “Cobra Effect” that is disabling paste on password fi... by banana_giraffe on Sunday June 26, 2016 @11:41AM (#11981233)

I respond with a strong password for all security questions. It created a cute incident recently when I had to verify my account over the phone by telling the phone rep that my favorite pet's name was 'o(c:Y^u=86U@4k', or whatever. I'll give the rep credit, they didn't care the answer made sense, just that it matched their screen.

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by ryan-c on Sunday June 26, 2016 @03:20PM (#11982206)

I had a bad time recently with one of those when the IVR system tried to verify my security questions. I ended up making farty sounds at it to get it to give up.

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by oneeyedpigeon on Sunday June 26, 2016 @07:29PM (#11983340)

I'm intrigued as to how you 'pronounced' that. Did you say "open parens" and "caret", and did they understand what you meant? Also, is having to divulge your password really the best way of verifying your account? Do they advise you to change your password immediately after going through this rigmarole?

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by banana_giraffe on Sunday June 26, 2016 @07:46PM (#11983409)

I would have rattled off something like "oh open paren sea cap why colon caret you equals" and so on. Honestly I have no idea if they parsed the sentence, or decided "gibberish from phone equals gibberish on screen .. good enough"

They didn't advise me to change my security question, no doubt because the name of my favorite childhood pet isn't likely to change.

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by Vexs on Monday June 27, 2016 @10:26AM (#11986322)

Huh, never thought about it, but that's a pretty good argument against random security questions.

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by simbalion on Friday July 01, 2016 @04:21AM (#12014589)

Another good argument is: having 5 passwords is not more secure than 1 really strong password.

I also think 2fa is ridiculous for 99% of applications. The widespread adoption we've seen is largely the result of developers trying to solve for user error, which as I stated in a previous comment is a waste of time and can never succeed (unless your goal is to find the flaws in your system).

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by ams6110 on Sunday June 26, 2016 @02:40PM (#11982022)

I do that too but shot myself in the foot on one site. Somehow I did not get one of the three random "answers" recorded in my password manager. And of course THAT is the question the site is now insisting I answer. I have tried a few times hoping one of the other two questions is presented, but so far no luck.

[ Parent | on HN ]