{"id":1740,"date":"2006-08-10T13:20:21","date_gmt":"2006-08-10T13:20:21","guid":{"rendered":"http:\/\/ubuntu.my\/wp30\/archives\/2006\/08\/10\/passwords_throu.html"},"modified":"2006-08-10T13:20:21","modified_gmt":"2006-08-10T13:20:21","slug":"passwords_throu","status":"publish","type":"post","link":"https:\/\/www.zephoria.org\/thoughts\/archives\/2006\/08\/10\/passwords_throu.html","title":{"rendered":"passwords through favorites = bad idea"},"content":{"rendered":"<p>My credit union decided to change their password recovery system today.  Now, you have to choose three questions and answer them.  The problem is that they are all &#8220;What is your favorite n&#8221; where n is restaurant, band, movie, song, actor, book, drink, food, place, past-time&#8230;<\/p>\n<p>Uhh&#8230; have we not learned anything?  People&#8217;s favorites change over time.  This is not something that a customer will remember and if it is stable, it is probably all over the web on their profiles for dating and social network sites.  So not only is this not a reliable way to help customers, it&#8217;s about as insecure as you can get.  Furthermore, the likelihood of a person writing this down is *huge* because it&#8217;s not something that they know by heart (like &#8220;where were you born&#8221; or &#8220;what&#8217;s your first pet&#8217;s name&#8221;).<\/p>\n<p>Can people please stop using favorites in the password recovery process?  Pretty please with a cherry on top??<\/p>\n","protected":false},"excerpt":{"rendered":"<p>My credit union decided to change their password recovery system today. Now, you have to choose three questions and answer them. The problem is that they are all &#8220;What is your favorite n&#8221; where n is restaurant, band, movie, song, actor, book, drink, food, place, past-time&#8230; Uhh&#8230; have we not learned anything? People&#8217;s favorites change [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_s2mail":"","footnotes":""},"categories":[9],"tags":[],"class_list":["post-1740","post","type-post","status-publish","format-standard","hentry","category-privacy"],"_links":{"self":[{"href":"https:\/\/www.zephoria.org\/thoughts\/wp-json\/wp\/v2\/posts\/1740","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zephoria.org\/thoughts\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.zephoria.org\/thoughts\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.zephoria.org\/thoughts\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.zephoria.org\/thoughts\/wp-json\/wp\/v2\/comments?post=1740"}],"version-history":[{"count":0,"href":"https:\/\/www.zephoria.org\/thoughts\/wp-json\/wp\/v2\/posts\/1740\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.zephoria.org\/thoughts\/wp-json\/wp\/v2\/media?parent=1740"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.zephoria.org\/thoughts\/wp-json\/wp\/v2\/categories?post=1740"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zephoria.org\/thoughts\/wp-json\/wp\/v2\/tags?post=1740"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}