Conversation

Enforcing “Security Questions” with set of predefined answers is DUMB, DUMBER, DUMBEST…

Oh, United, this is even beyond stupidity… Usually, I just put random strings into those answers, but if I can’t I am just not going to create the account.

I mean:
> What is your favourite pizza topic?
> What was your favourite subject at school?

The answers will definitely not be uniformly random and can be easily socially engineered…. Who the fuck, in their sane mind, thought this is a good idea?

2
0
0
@ondrej we value your privacy
your pseudo-anonymous answers will be subjected to 3rd party data analysis used for ad targeting for you personally ... ehm, anonymously nkoWhaaaat
0
0
2

@ondrej Doing it this way makes it more likely users recover their lost passwords without resorting to customer service. As long as there are more people who lose their passwords than people who get their accounts hacked, this bet is net saving in support costs for United.

1
0
0

@suihkulokki Exactly what I am saying - they are prioritizing corporate money over security of the people because they won’t be help accountable. And that’s dumb and horrible, and they should be made accountable.

0
0
0