The Curse of the Secret Question. . [Schneier on Security] The secret question is a curse, but typing a random answer is harsh. A lot of sites now let you type your own question, my trick is to type a generic question like What's up? and then provide a very specific answer like "What goes up must get high." The question gives few clues and the answer is hard to random guess, it becomes in effect a passphrase with higher security than a password (less susceptible to brute force attacks).
8:02:48 AM
|
|