]From: John Williams <[email protected]> ]> Gary Nunn <[email protected]> wrote: ] ]> This morning, I was trying to access a credit card webpage to check my ]> account, it didn't like my password. I was given two security challenge ]> questions: ]> ]> 1. What is the last name of your fifth grade teacher? ]> 2. What was the license plate of your first car? ] ] Ha! They should flag it as suspicious if people DO know the answers to ] those questions, since it is obviously not you but someone who has ] stolen your identity database file and has all the information in ] front of them!
Wow! If the bank had those kinds of things on record, what else might they ask? What embarrassing thing did you do on your first date? Who else knows about that thing that happened? Joking aside, don't you have to provide the answers up-front for your favorite challenge questions when setting up the account? I always understood this system to work this way: During setup, select your 3-5 favorite questions and fill in answers for them. The security application doesn't care what you type as long as it's text-like. I've even seen an option to provide your own question which you then answer. Later on, when you get to a place where they have to challenge your identity, choose a question that you know you already answered during setup, and fill in the same answer, whatever that was. -- Matt ----- Original Message ---- From: John Williams <[email protected]> To: Killer Bs (David Brin et al) Discussion <[email protected]> Sent: Monday, March 9, 2009 10:30:49 AM Subject: Re: Impossible account security questions. On Mon, Mar 9, 2009 at 8:33 AM, Gary Nunn <[email protected]> wrote: _______________________________________________ http://mccmedia.com/mailman/listinfo/brin-l_mccmedia.com _______________________________________________ http://mccmedia.com/mailman/listinfo/brin-l_mccmedia.com
