Enforcing “Security Questions” with set of predefined answers is DUMB, DUMBER, DUMBEST…
Oh, United, this is even beyond stupidity… Usually, I just put random strings into those answers, but if I can’t I am just not going to create the account.
I mean:
> What is your favourite pizza topic?
> What was your favourite subject at school?
The answers will definitely not be uniformly random and can be easily socially engineered…. Who the fuck, in their sane mind, thought this is a good idea?
@ondrej Doing it this way makes it more likely users recover their lost passwords without resorting to customer service. As long as there are more people who lose their passwords than people who get their accounts hacked, this bet is net saving in support costs for United.
@suihkulokki Exactly what I am saying - they are prioritizing corporate money over security of the people because they won’t be help accountable. And that’s dumb and horrible, and they should be made accountable.