Passwords and Secret Questions  |  June 25, 2009  

If I know you, I bet I can guess your password within five guesses. The truth may set you free, but honesty will get you into trouble when it comes to your security questions for banking, social networking and other applications.

Once again, Bruce Schneier has come upon some excellent research reminding us about why it’s a bad idea to use the standard security questions online, or to answer them truthfully. Read it and weep: Secret Questions

Vaclav Vincalek
Pacific Coast Informer Blog