Post a boarding pass on Facebook, get your account stolen

Re:Post a boarding pass on Facebook, get your account stolen by musage on Saturday September 23, 2017 @05:46AM (#15318986)

But the attacker kind of has to know the answer is gibberish from the bat, otherwise they'd either guess or pretend to not remember a real answer, which is noticeably different from saying something like "oh, that's 30 random characters but I don't have the note with me right now".

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by cortesoft on Saturday September 23, 2017 @11:32AM (#15320172)

Here is how it would go... attacker gives a real answer, support says no that isn't it. Attacker goes, "oh, sometimes I give fake answers for the question... is it a really long string of characters?"

Or they could go through a few things like that, always giving the excuse that they give false answers until they stumble on the right one.

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by tonyedgecombe on Saturday September 23, 2017 @09:40AM (#15319674)

But we already know @sersi just mashes the keyboard for those questions :)

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by sersi on Saturday September 23, 2017 @06:03PM (#15322018)

Sure, but I doubt it would be easy to find my identity from my hn account name.

[ Parent | on HN ]