For security questions I usually put a random long 10 word passphrase. LPT for you guys
Mildly Infuriating
Home to all things "Mildly Infuriating" Not infuriating, not enraging. Mildly Infuriating. All posts should reflect that.
I want my day mildly ruined, not completely ruined. Please remember to refrain from reposting old content. If you post a post from reddit it is good practice to include a link and credit the OP. I'm not about stealing content!
It's just good to get something in this website for casual viewing whilst refreshing original content is added overtime.
Rules:
1. Be Respectful
Refrain from using harmful language pertaining to a protected characteristic: e.g. race, gender, sexuality, disability or religion.
Refrain from being argumentative when responding or commenting to posts/replies. Personal attacks are not welcome here.
...
2. No Illegal Content
Content that violates the law. Any post/comment found to be in breach of common law will be removed and given to the authorities if required.
That means: -No promoting violence/threats against any individuals
-No CSA content or Revenge Porn
-No sharing private/personal information (Doxxing)
...
3. No Spam
Posting the same post, no matter the intent is against the rules.
-If you have posted content, please refrain from re-posting said content within this community.
-Do not spam posts with intent to harass, annoy, bully, advertise, scam or harm this community.
-No posting Scams/Advertisements/Phishing Links/IP Grabbers
-No Bots, Bots will be banned from the community.
...
4. No Porn/Explicit
Content
-Do not post explicit content. Lemmy.World is not the instance for NSFW content.
-Do not post Gore or Shock Content.
...
5. No Enciting Harassment,
Brigading, Doxxing or Witch Hunts
-Do not Brigade other Communities
-No calls to action against other communities/users within Lemmy or outside of Lemmy.
-No Witch Hunts against users/communities.
-No content that harasses members within or outside of the community.
...
6. NSFW should be behind NSFW tags.
-Content that is NSFW should be behind NSFW tags.
-Content that might be distressing should be kept behind NSFW tags.
...
7. Content should match the theme of this community.
-Content should be Mildly infuriating.
-The Community !actuallyinfuriating has been born so that's where you should post the big stuff.
...
8. Reposting of Reddit content is permitted, try to credit the OC.
-Please consider crediting the OC when reposting content. A name of the user or a link to the original post is sufficient.
...
...
Also check out:
Partnered Communities:
Reach out to LillianVS for inclusion on the sidebar.
All communities included on the sidebar are to be made in compliance with the instance rules.
Yeah, don't answer truthfully. My favorite food has been a waterslide for ages.
Now if you would just provide me with your other account information...
Born on January first 1900. Undefined gender.
Got him! Send in the seals.
I always called them insecurity questions. Im almost sure its easier for someone or thing with a dossier on me to answer any of them than me.
First partner is fine. First foreign country isnt terrible. The rest range from pretty bad to "what human thought this was a good security question"
First partner is fine.
If you're really concerned about security, you should know people can often crack this one pretty easily if you have public social media accounts. It depends on how much you have at stake. I don't think it would matter for your Netflix password, but if it's an investment account with tens of thousands of dollars or more, you should be aware that "hacking" is really just a very organized process of digging into data leaks and social media accounts to scrub as much information about a target as possible.
To this end, your childhood friend should be (237#0Je<-)Banana39999_willywarmer, and the street you grew up on is Jupiter's radiation belt.
Yeah but first boyfriend/girlfriend drives me crazy because then I'm going back through my various early relationships trying to figure out who counts as a "girlfriend". I'd say Sherry was the first but she always said we were never really together. Well now you're a security question answer so you can't deny it anymore Sherry.
Choose questions, write them down, place the Q's & A's in the notes of your password app. Use paper to smoke them mara-ju-anas.
The best insight I remember reading about questions as MFA, is to consider the answer as a password. If you use a password manager, don't feel forced to use actually true answers. The answer doesn't have to be true, you just need to know it. Use a password manager and invent answers which you store. This is so much more secure than relying on the truth.
Edit: others mention the same thing.
Yeah I use a 10 word passphrase for these
Ahh yes, my favorite account on “x”. OqY4LO%&1Xv&e9YbRczM^nc3tD*f$4um3
Most of these read like ads. Most of the rest read like information found in an advertising profile (the kind of info that ad companies purchase). Only a couple read like actual things people care about.
Nokia 5.1 Nothing else would make any sense to use.
Wrong community. Extremely infuriating.
One method to approach this is to use a simple personal algorithmically to create answers here. As in, you could put any security question in front of someone that uses this method, even those questions never seen, and the personal algorithm would produce an answer only the user would know. Here are a couple algorithms I made up to show an example for this post.
Input security question (the first from OP's list): What was the first stock you ever bought?
- Algorithm number one answer: eight - Algorithm: How many words in the security question?
- Algorithm number two answer: sold - Algorithm: Ignore all words except the verb, in this case "bought". Whatever the verb is, the answer is always the opposite verb.
This way you don't necessarily have to write down your security question answers. Most certainly never write down your personal algorithm. Using this method it is trivially easy for you (and only you) to produce an answer from any security question given to you and equally easy for you to reproduce the answer when you need it in the future.
pick the first three, then always punch in your own version of "none1" "none2" "none3" as the answers. This isn't rocket surgery.
If you want easy non security just answer the last word of the question.
Haven't you ever had places randomize the question order when you have to answer the. Later?
Do you not get the basics of this? You're not asked to pick from all the questions when you answer the security questions in an authentication scenario.... lmao
Do you not understand what I'm saying?
Let's say it asks you to pick from multiple questions.
- X
- Y
- Z
- A
- B
- C
You choose questions Y, B, and C. You answer them as none1, none2, and none3.
When you need to answer a security question, it randomly gives you question Y. But question Y is not numbered. How do you remember that the answer to question Y is none1 and not none2 or none3?
Doesn't need to be real answers. Can just use combo nonsense like correcthorsebatterystaple or whatever.
But yeah, lots of other people are fucked.
Why would you answer the actual question anyway? That just means if someone knows the actual answer, they can get into your account. The question shouldn't matter. It should be treated as a secondary/tertiary/etc password.
"What's your mother's maiden name?"
"c@#Wz6Ani5$!Z8L5$1$DJybIWaq^BwZw"
"She's French."
use a local password manager
you can usually log these questions and your answers in there.
make sure your answer has nothing to do with the content of the question.
"What's the first app you installed on your smart phone?"
How many of these accounts can now be compromised by answering X/Twitter/Facebook/Instagram/What'sApp?
Say what you will, the lightsaber app was cool and definitely worth $0.99 to get custom colors.
Joke's on you, no one will ever know that the first app I ever installed is TCPMP on a Windows Mobile smartphone to play ogg vorbis audio from the SD card!
So-called "security questions" like these are prohibited under various standards (there's a NIST one that I can't remember exactly, and OWASP ASVS) because they've always been really terrible at verifying it's actually you answering them, and not just someone who happens to know the answer. Mother's maiden name being the notorious example.
Also many of them have extremely likely answers.
These questions make me feel old as hell.
Just make the answers diceware passwords and store them in your password manager.
Holy shit, that's so smart. Now to see if Bitwarden can auto-fill them
It's unlikely since it uses the field ID and not the text, so it wouldn't know which question went with which answer.
It's so rarely needed to actually use these anyway, that it's a non-issue IMO. You should never opt to use security questions as they are terrible from a security standpoint. This is just for when they are required by stupid websites.
I'm waiting for the day I need phone support and have to tell them 512 random characters over the phone 😆
This is the right answer. I never answer those, you add new entries in your password manager in the notes for the main site.
If you answer truthfully to any one of those “security questions”, your account is at risk.
Don't add as notes, add as a new hidden option in bitwarden. Use the password maker to generate a string of crap
TIL about hidden options in Bitwarden, thanks!
I of course already use the password generator to make up the random string, and often you can’t use special characters there since they expect real words as answers.
I just make an extra entry in KeePass with a suffix and different icon. I treat the answer just like an additional password and put the question as username or in the notes.