86% of CrashCrate subscribers used passwords already leaked in other breaches

Re:86% of CrashCrate subscribers used passwords already leak... by raverbashing on Wednesday May 02, 2018 @01:43PM (#16979381)

I'm not talking about password managers (in this case)

You should worry about strong passwords, but the point is moot if the rest of the system has other major flaws.

See: people who have their security answer as a long hex string, and customer service doesn't check the digits.

[ Parent | on HN ]

Re:86% of CrashCrate subscribers used passwords already leak... by scrollaway on Wednesday May 02, 2018 @01:56PM (#16979527)

It's hard to tell what security answers are used for when you're writing it in. If it's for use with customer support, it should probably be something like "CSR IMPORTANT: DO NOT ACCEPT VAGUE ANSWERS 309c91b10edb2"

[ Parent | on HN ]

Re:86% of CrashCrate subscribers used passwords already leak... by raverbashing on Thursday May 03, 2018 @06:41AM (#16984730)

Good idea! Yeah it's usually for CS and id verification.

(It's also a good idea to, if you use correct answers, to not leave them on Fb or other places)

[ Parent | on HN ]