Networks·41,393 discussions

Security Questions – using Widely known facts?

Locked

With Mobile and Internet banking growing heavily, do we stop to see what kind of security questions our banks ask before letting us do banking – and even getting our password reset. Most banks seem to ask “Mother’s maiden name” as equivalent to a “Open Sesame” of Alibaba. But is it not well known to close relatives and even shared among siblings. Is this based on a implicit faith on family and relations?

Similarly, Organizations seems to depend on Employee number, Date of Birth, Date of Joining the organization as the “secure” questions based on which their internal systems open up. Are these information secure and really private to the individual? Most of these are public knowledge and even available in the organization’s web site – especially for people at high level.

Is there anything like a good security question at all? Between ease of remembrance and known only to an individual looks like, compromise is the only way. But using too widely known facts as security questions does seem ironical.

Topic

You, sir

In reply to Security Questions – using Widely known facts?

Are what is ironical.

he is

In reply to You, sir

right though Santee.
to bad he didn’t have the balls to phrase this:
But using too widely known facts as security questions does seem ironical.

as it should have been:

But using too widely known facts as security questions does seem assinine

surely

In reply to Security Questions – using Widely known facts?

Surely something should really been done about the it is done. Subottage is very easy in such cases of fraud. May be introducing more advanced methods like finger printing as a method to identify users/clients/customers then we see how that can be duplicated.

[Author]

Replies