Every once in a while I question security controls, and the latest one I questioned was security questions.
I’m talking about those questions that financial sites like banking and credit card sites ask you when you log in. Not the ones used to reset your password (although this post applies to them too).
No, this won’t be a rant about the stupid questions that sites give you to chose from, such as your mother’s maiden name or what is your favorite color. I gave up questioning those issues long ago.
Continue reading →
Like this:
Like Loading...
Filed under Security, Security Scout
Tagged as answer, bank, capital, color, credit card, letter, lowercase, maiden name, mother, question, Security, street, uppercase
I was at a client’s site looking for more contract work when the manager of the department started telling me about their great IT security website on their Intranet. She clicks on their random generator password page and shows me how you can generate a block of “approved” passwords, sanctioned by their security department. At the top of the page, a banner read: Select a Strong Password!
Continue reading →
Like this:
Like Loading...
Filed under Humor/Irony, Security, Security Scout
Tagged as generator, letter, number, password, policy, random, Security Scout, special character, strong, weak
Every once in a while I question security controls, and the latest one I questioned was security questions.
ITauditSecurity 