Re:Don't give away historic details about yourself
by MzxgckZtNqX5i on Tuesday April 10, 2018 @05:27PM
(#16805623)
One thing that really drives me crazy is that Apple asks me my security questions even if I enter my correct password because I haven't logged in for a while.
I didn't saved the answers (and this is my fault) but anyway I would have done it in the KeePass database that contains also the password, so no additional security.
Re:Don't give away historic details about yourself
by zepolen on Wednesday April 11, 2018 @04:17AM
(#16809050)
They do that to remind you of the security answers. Still a broken model over all.
Re:Don't give away historic details about yourself
by MzxgckZtNqX5i on Wednesday April 11, 2018 @04:31AM
(#16809128)
They could prompt you with the security questions as some other services does for master passwords for example, but usually there's the possibility to skip it.
Now I'm locked out even though I know both username and password: this is BIG logic flaw in my opinion.
Re:Don't give away historic details about yourself
by ryannielsen on Tuesday April 10, 2018 @03:48PM
(#16804603)
Apple still does this kind of crap.
Not for users who've opted into two-factor authentication: https://support.apple.com/en-us/HT204915
From the page:
Do I still need to remember any security questions?
No. With two-factor authentication, you don't need to choose or remember any security questions. Your identity is verified exclusively using your password and verification codes sent to your devices and trusted phone numbers. When you enroll in two-factor authentication, we will keep your old security questions on file for two weeks in case you need to return your account to its previous security settings. After that, they will be deleted.
Apple still does this kind of crap. Actual questions:
In what city did your parents meet? What is the first name of your best friend in high school?
Recently an airport public WiFi in a major city in Europe wanted my birthdate and the agreement language said that I acknowledge everything I'm stating is true and correct. It's so blatantly asinine. I didn't even bother to look if it cited some EU law that lying is a crime, I just said fuck it, and went without Internet for a few hours.