Re:The Effectiveness of Publicly Shaming Bad Security
by austhrow743 on Tuesday September 11, 2018 @10:29PM
(#17965147)
Theres a security issue there in that you don't want them in "I think that would be fine" territory.
Some of those reps may have been fine with you saying "oh no. I didn't think I'd ever need that and just mashed the keyboard".
Better to use something that's still made up, but is plausibly true.
Re:The Effectiveness of Publicly Shaming Bad Security
by traviscj on Wednesday September 12, 2018 @12:43AM
(#17965612)
"I didn't smash this F^O9dA66@wUPpK5$lTXBbrQ#yLP1EGl$"
Re:The Effectiveness of Publicly Shaming Bad Security
by aaronmdjones on Tuesday September 11, 2018 @05:17PM
(#17963455)
As is demonstrated time and time again, the weakest point in any security system is usually a human being.
Re:The Effectiveness of Publicly Shaming Bad Security
by user5994461 on Tuesday September 11, 2018 @06:31PM
(#17963978)
If the operator gives up after the 10th random character given on the phone, it's still quite secure.
Re:The Effectiveness of Publicly Shaming Bad Security
by btilly on Tuesday September 11, 2018 @08:21PM
(#17964598)
I am reminded of https://xkcd.com/1181/.
What garbage string is there doesn't matter. Just as long as it is recognizably garbage and you know it.
Rep: "Tell me the answer to this question."
Me: "Ok, let's see.....ah. So, it looks like a random string of gibberish, right?"
Rep: "Um, well...(unsure if he's allowed to say Yes or No)"
Me: "Yeah, I use a password manager for all my stuff, so all my passwords are randomly generated. I didn't think I'd ever have to read it over the phone. Sorry about that! I can read it out for you, but it might take awhile. If I read you the first three characters and the last three characters, is that sufficient to demonstrate for you that I know the Answer?
Rep: "Yes, I think that would be fine."
Me: "Alright, then! First three, 'F', 'caret', 'capital O'. Last three, 'capital G', 'lowercase l', 'dollar sign'.
---
As I said, I've never had anyone challenge me to read the full thing out. When I explain why it is that way and give them the bookends, they are usually convinced that I'm me.