Your Mother’s Maiden Name Is Not a Secret

Re:Your Mother’s Maiden Name Is Not a Secret by city41 on Friday December 29, 2017 @09:49PM (#16033531)

I think it’s all debatable. That human will always be a weak link. It just takes one representative to forget to ask or get convinced with “oh it’s my wife’s mother’s maiden name and my wife isn’t here and I’m in a real bind”.

But in exchange, my security answers are no longer compromisable online. I think overall it’s a positive trade off, but that’s just my hunch.

[ Parent | on HN ]

Re:Your Mother’s Maiden Name Is Not a Secret by iak8god on Friday December 29, 2017 @09:55PM (#16033561)

Well, for sure it's better than using your mother's actual maiden name. But I'd rather see security questions done away with altogether.

[ Parent | on HN ]

Re:Your Mother’s Maiden Name Is Not a Secret by city41 on Friday December 29, 2017 @10:06PM (#16033611)

I agree, I think they’re a real problem. I think it’s possible to eliminate human error over the phone too. Perhaps design a system that doesn’t let the representative into your account until they type in the 2FA token your phone provides or something (I don’t really know, I’m far from a security expert)

[ Parent | on HN ]