| |||||||||||||
8 million leaked passwords connected to LinkedIn, dating website (ars technica)8 million leaked passwords connected to LinkedIn, dating website (ars technica)Posted Jun 7, 2012 16:53 UTC (Thu) by endecotp (guest, #36428)In reply to: 8 million leaked passwords connected to LinkedIn, dating website (ars technica) by theophrastus Parent article: 8 million leaked passwords connected to LinkedIn, dating website (ars technica)
> what's the password to your bank account again?
My bank doesn't have a password; instead, you need to know a 4-digit PIN, and various easily-discovered facts like the name of my first school.
(Log in to post comments)
8 million leaked passwords connected to LinkedIn, dating website (ars technica) Posted Jun 8, 2012 11:24 UTC (Fri) by AndreE (subscriber, #60148) [Link]
So your bank account password isn't important? Or do you use a magical bank that isn't part of "real life"?
8 million leaked passwords connected to LinkedIn, dating website (ars technica) Posted Jun 9, 2012 0:37 UTC (Sat) by martinfick (subscriber, #4455) [Link]
Not if it can be changed by anyone who knows the details he just mentioned. Which is why backup questions are the dumbest things ever. You only have to compromise the weakest link. It doesn't matter how strong your password is if anyone can change it with knowledge of "unchangeable pseudo secrets" about yourself. If I care about security on a site, I would never answer those questions with anything but a random answer (just record it in a safe place).
|
|||||||||||||