this post was submitted on 23 Jun 2026
176 points (98.4% liked)

Technology

87515 readers
2794 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Zwuzelmaus@feddit.org 20 points 2 months ago* (last edited 2 months ago) (9 children)

By wrapping standard bank security questions, like your mother's maiden name, your first pet, or the street you grew up on

These questions have made me wonder ever since I first saw them. So I want to ask you all:

Do you take them for serious?

It seems a cultural difference maybe, but I could never remember what I have answered to one of them. I don't even know the true answers to most of them, and if I know it, then I would still not want my bank to know it.

The only way where this kind "security" makes sense to me is when I can freely type in both the question and the answer. Then I choose a question that does not make sense to most other people, only to me personally, and then I won't ever forget the answer.

[–] skaffi@infosec.pub 9 points 2 months ago (7 children)

As long as you can choose the answer, you can also choose what the question really is. You can just decide that questions about your mum's maiden name are actually asking you about the last name of the doctor that delivered your first born.

Or, better yet don't tie security to personal or externally verifiable information about yourself. In the one or two cases, in recent years, where I've had to fill out such (in)security questions, I've just treated them as additional password fields, where I just create additional fields for them in my password manager, and generate long, random responses as their correct answers. Why yes, my mother's maiden name is Correct7Horse@Battery!Staple, why do you ask?

[–] isVeryLoud@lemmy.ca 3 points 2 months ago (4 children)

I once did that, and had to spell out a 32 character alphanumeric password with special characters over the phone lol

[–] skaffi@infosec.pub 2 points 1 month ago (1 children)

You had to share your password over the phone? That's asinine. And you say it was your bank, and a major one, to boot? Wow. If that's their approach to security, I'd tell them they can just look up my password in their database, which I'd assume to be in plaintext too (and to actually just be a really big Excel sheet).

Anyway, regardless, you need some passphrases in your life! So much easier to deal with, if you ever have to share it out loud, and more importantly, a whole lot easier for you to parse and manually type, on the occasions where it can't be auto-filled. As I said before, Correct Horse Battery Staple! :)

[–] isVeryLoud@lemmy.ca 1 points 1 month ago

Sorry, it was a security question, not a password, my bad!

And yes, I have since been enlightened about the church of the correct horse battery staple

load more comments (2 replies)
load more comments (4 replies)
load more comments (5 replies)