GolfHos

General => The Cantina => Topic started by: gleek on March 27, 2008, 08:11:08 AM



Title: Worst security questions
Post by: gleek on March 27, 2008, 08:11:08 AM
Quote
Last name of your favorite elementary school teacher?
What was the name of your favorite childhood pet?
What is your favorite hobby?
What is your favorite film?
Who is your favorite author?
What country would you like to visit?
Who is a famous person you'd most like to meet?
What is the farthest from home you have traveled?

The morans at AT&T picked questions for which answers could change at any time or could easily be forgotten over time. And they're don't giving an option for standard questions like "What's your mother's maiden name?" or "In what city were you born?". *goshdarn* idjits!


Title: Re: Worst security questions
Post by: Aske on March 27, 2008, 08:16:13 AM
 :o


Title: Re: Worst security questions
Post by: hobbit on March 27, 2008, 08:18:33 AM
Many of those questions are stupid.

However, the age old maiden name and city of birth are both relatively easy to find out for someone - and therefore insecure.  They did have a need to eliminate them.



Title: Re: Worst security questions
Post by: gleek on March 27, 2008, 08:22:55 AM
Many of those questions are stupid.

However, the age old maiden name and city of birth are both relatively easy to find out for someone - and therefore insecure.  They did have a need to eliminate them.

Well, we're talking about access to a stupid telephone account not an IRA. :D


Title: Re: Worst security questions
Post by: Aske on March 27, 2008, 08:29:05 AM
according to various things i have seen on tv and silver screen  if i know your phone account #,  you're in deep poopola.


Title: Re: Worst security questions
Post by: stroh on March 27, 2008, 08:33:23 AM
LOL  I can't remember which one it was I did last.  Probably one of the Comcast deals, but their question was What is your favorite drink.

My identity is toast.  ;D


Title: Re: Worst security questions
Post by: gleek on March 27, 2008, 08:33:51 AM
according to various things i have seen on tv and silver screen  if i know your phone account #,  you're in deep poopola.


Enhance (http://supertroopersenhance.ytmnd.com/)


Title: Re: Worst security questions
Post by: Aske on March 27, 2008, 08:34:21 AM
LOL  I can't remember which one it was I did last.  Probably one of the Comcast deals, but their question was What is your favorite drink.

My identity is toast.  ;D


you should have typed it in while drunk.   i'm sure nobody would guess bbeere.


Title: Re: Worst security questions
Post by: stroh on March 27, 2008, 08:35:02 AM
 [sm_oops] [sm_rolling]


Title: Re: Worst security questions
Post by: gleek on March 27, 2008, 08:35:09 AM
stroh:

Who is your favorite author?
"What's an author?"


Title: Re: Worst security questions
Post by: 1puttpar on March 27, 2008, 08:37:27 AM
stroh:

Who is your favorite author?
"What's an author?"

Wasn't that a movie starring Dudley Moore?


Title: Re: Worst security questions
Post by: stroh on March 27, 2008, 08:38:37 AM
 ;D

(http://news.bbc.co.uk/olmedia/1390000/images/_1390612_dud_arthur150.jpg)


Title: Re: Worst security questions
Post by: gleek on March 27, 2008, 08:39:03 AM
Or:

What is your favorite hobby?

"Riding Paul Bunyan's Log Chute"
*access denied*

"Squeezing the Charmin"
*access denied*

"Waxturbating"
*access denied*


Title: Re: Worst security questions
Post by: Uisce Beatha on March 27, 2008, 09:34:46 AM
On all the systems we develop the user is asked to enter their security question also. 

Q: "What was the name of that chick in high school who was nicknamed 'Train'?"

A: "Lena Picisso"


Title: Re: Worst security questions
Post by: E-A-G-L-E! on March 27, 2008, 10:35:31 AM
Well, if you have a problem remembering the answers to security questions, then write 'em down in a .txt file then encrypt it.


Title: Re: Worst security questions
Post by: Aske on March 27, 2008, 10:58:18 AM
Well, if you have a problem remembering the answers to security questions, then write 'em down in a .txt file then encrypt it.

with enough brute force computing and a long time for waiting,  any encryption can be broken 


Title: Re: Worst security questions
Post by: E-A-G-L-E! on March 27, 2008, 11:05:59 AM
Well, if you have a problem remembering the answers to security questions, then write 'em down in a .txt file then encrypt it.

with enough brute force computing and a long time for waiting,  any encryption can be broken 


True, but it's better than none at all.


Title: Re: Worst security questions
Post by: Uisce Beatha on March 27, 2008, 11:07:34 AM
Well, if you have a problem remembering the answers to security questions, then write 'em down in a .txt file then encrypt it.

with enough brute force computing and a long time for waiting,  any encryption can be broken 


While you are correct we were always taught that physical security is the first and foremost line of defense.  If that file is stored in a fashion that removes it from any chance of net access (standalone machine, floppy, CD, etc.) then the bad guys are going to have to come through your door to get it.  Sorta limits the exposure by several orders of magnitude.

Creating, encrypting and securing (physically) that file is a bunch of work I don't need though.  Simpler to just use 'burzum' as the answer no matter what the hell the question might be.


Title: Re: Worst security questions
Post by: Clive on March 27, 2008, 11:35:58 AM
I've always done something similar to what Uisce said: I make a combination out of random factoids from my past, then use that "answer" to every security question.  I mean, how is AT&T going to know my dog's name when I was a kid wasn't "90210penis5000meter"?


Title: Re: Worst security questions
Post by: stroh on March 27, 2008, 11:53:37 AM
Plus this is typical for me:

password:  fleshlight
verify password:  fleshlight

*ERROR:  Passwords must contain at least one numerical character. *


Title: Re: Worst security questions
Post by: Aske on March 27, 2008, 11:55:15 AM
Plus this is typical for me:

password:  my22ndfleshlightwiththespecialordergollumsleeveismyfavorite
verify password:  my22ndfleshlightwiththespecialordergollumsleeveismyfavorite


 :o



 [sm_disgust]



Title: Re: Worst security questions
Post by: stroh on March 27, 2008, 11:56:38 AM
LOL   [sm_disgust]


Title: Re: Worst security questions
Post by: gleek on March 27, 2008, 12:09:30 PM
Plus this is typical for me:

password:  fleshlight
verify password:  fleshlight

*ERROR:  Passwords must contain at least one numerical character. *

password: 8==> {})=Fleshlight®=)

There's a numeric character in there somewhere.



Title: Re: Worst security questions
Post by: stroh on March 27, 2008, 12:15:52 PM
Plus this is typical for me:

password:  fleshlight
verify password:  fleshlight

*ERROR:  Passwords must contain at least one numerical character. *

password: 8==> {})=Fleshlight®=)

There's a numeric character in there somewhere.



LMAO!  +1