Comment Re:"Knowledge-based" questions are really bad (Score 1) 349
I treat such questions as passwords and never put real info in them. If they're basing it on info they think they already have, they should be slapped hard.
This, so much this! It really annoys me that sooo many sites all ask questions from the same pool of stupid biographical data, thereby making guessing them almost trivial for people like vengeful ex wives and rogue IT staff at any random website that collects password reset questions.
Mother's maiden name? "handlebar mustache"
First pet's name? "furious green ideas"
Granted, I don't tend to pick what I'd call really all that "secure" passwords for them, but I sure as hell don't give them real answers. Hell, half the questions they ask, I don't even know the right answer - "College roommate's home town"??? Seriously? WTF, I couldn't stand the guy, you can sum up the entirety of our conversation with "can you please wash your bedding this month?" and "I told you you couldn't make bacon in a hot-pot!"
This, so much this! It really annoys me that sooo many sites all ask questions from the same pool of stupid biographical data, thereby making guessing them almost trivial for people like vengeful ex wives and rogue IT staff at any random website that collects password reset questions.
Mother's maiden name? "handlebar mustache"
First pet's name? "furious green ideas"
Granted, I don't tend to pick what I'd call really all that "secure" passwords for them, but I sure as hell don't give them real answers. Hell, half the questions they ask, I don't even know the right answer - "College roommate's home town"??? Seriously? WTF, I couldn't stand the guy, you can sum up the entirety of our conversation with "can you please wash your bedding this month?" and "I told you you couldn't make bacon in a hot-pot!"