security questions

[Chris Kuethe]

On Wed, Aug 6, 2008 at 8:23 AM, Peter Saint-Andre <stpeter at stpeter.im> wrote:
> Wells Fargo is requiring their online banking customers to provide answers
> to security questions such as these:
>
> ***
> ...
> ***
>
> It strikes me that the answers to many of these questions might be public
> information or subject to social engineering attacks...

Lie.

I don't actually give the real answers to those questions for just
that reason. Make up some plausible and memorable words (maybe using a
tool like "yould"), and pick your mother a new random name from the
phone book.


-- 
GDB has a 'break' feature; why doesn't it have 'fix' too?

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com