Re:Security questions are salt
by btilly on Monday August 13, 2012 @10:22AM
(#4375993)
Same comment that I left there.
If multiple sites use the same security question, they will contain the same answer. Therefore if one site has been compromised, someone could use it to login as you at another site.
To fix that you need to add the site itself to the data to hash.
If multiple sites use the same security question, they will contain the same answer. Therefore if one site has been compromised, someone could use it to login as you at another site.
To fix that you need to add the site itself to the data to hash.