undefined | Better HN

0 pointscortesoft4y ago0 comments

That is a major downside with putting gibberish in for answers to security questions… let’s hackers socially engineer support into letting you get access by saying something like, “oh man, I just mashed on my keyboard for that I don’t remember!”

You would hope it wouldn’t work, but it probably will.

0 comments

3 comments · 2 top-level

brewmarche4y ago· 1 in thread

That’s a good point. It’s better to use wrong but plausible answers or random sentences (some password managers can generate phrases from a word list)

mellavora4y ago

or even better, use some random non-words. There was a post here a few months back about a service which generated non-existent but plausible sounding words.

So, your "favorite city" could be i.e. HorsecrackBay Griennstone.

jedberg4y ago

That's why I always put legit but wrong answers in. Can't really guess because they're all different and made up, but also can't say, "Oh I just mashed the keyboard".

j / k navigate · click thread line to collapse