News for hackers. Stuff that matters.
Re:Don't give away historic details about yourself by gnulinux on Tuesday April 10, 2018 @02:30PM (#16803805)
My problem with that is remembering and generating it. First problem is easy to solve with password managers but you still have to generate an ideally long car name with no bias. If you put some bias, then it might be backtracked. You can have a dictionary of possible car names but then you're open to attack if that dictionary is found or predictable enough that someone else can compile that list. It just doesn't feel secure enough to me.
Re:Don't give away historic details about yourself by Dylan16807 on Tuesday April 10, 2018 @03:31PM (#16804411)
A security question doesn't need to have a huge amount of entropy. It's probably not hashed in the first place, so computerized brute forcing isn't a worry. It just needs to stand up against a limited number of fake logins or password reset attempts.
Re:Don't give away historic details about yourself by aaron_m04 on Tuesday April 10, 2018 @07:32PM (#16806664)
What about those programs that generate a Markov model out of a corpus of text? You could use that to generate the answers (provided the randomness source is secure).