logoalt Hacker News

krick • yesterday at 11:21 PM • 1 reply • view on HN

It asks you to choose 4 (four!) "secret questions" as a "security" measure. I decided that keeping your domains with an organization that insists on idiotic practices that are firmly forbidden by every sensible security practices guide (OWASP, NIST 800-63, anything, really) since like 2015 is not a very wise choice.


Replies

rationalist • yesterday at 11:36 PM

Tell that to the banks, alarm companies, etc that do the same thing :-/

I just always use a plausible but false and unique answer, which I just keep track of in my password manager.

➕ show 2 replies