Timeline for Do security questions subvert passwords?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 21, 2011 at 21:57 | history | migrated | from stackoverflow.com (revisions) | ||
| May 21, 2011 at 21:42 | comment | added | eaj | +1 because I agree that these questions are BAD FOR SECURITY. Secure passwords are completely pointless when the so-called security questions ask for "private" information that would be easy for a hacker to obtain. Sure, you can lie or fill in gibberish, but the chances are pretty good that you'll lose that information when you lose the password. It drives me crazy (crazy, I tell you!) to see web sites saying that they're "increasing security" by adding these questions when they're doing exactly the opposite. | |
| May 21, 2011 at 21:40 | comment | added | Oskar Kjellin | @Andreas as I stated, at least Hotmail does. Aren't they still the biggest? | |
| May 21, 2011 at 21:39 | comment | added | Andreas | Most email sites (to my knowledge) do use alternate email addresses for such reasons. If not then make sure your question and answer is indeed hard to crack.But then we're back to why not just remember your password in the first place. | |
| May 21, 2011 at 21:36 | comment | added | Oskar Kjellin | Well, many email sites (like hotmail) uses this function. Would be kinda useless for them to send an email with the password (unless you have specified an alternate email address) | |
| May 21, 2011 at 21:33 | history | answered | Andreas | CC BY-SA 3.0 |