mgroves

I was logging in to a new bank account that I created recently, and they asked me to create some security questions.

This is typically stuff like “mother’s maiden name” and whatever, just to increase the amount of barriers to unauthorized access.

At this particular site, you can select from a couple dozen pre-written questions and then supply your answer in a textbox. So, here’s an example:

I was just about to submit this when I though to myself: “Wait a second. That last question would have the same answer for every single person who doesn’t live in New York.” OH, EXPLOITABLE!

4 Responses to “Insecure security questions”