Sep
01
Securing Security Challenges
ByHave you ever seen those security challenge questions on websites to help authenticate you?
• Which bank branch do you live closest too? • What car do you wish you owned? • What is your favorite food? • Who is your favorite book character? • What is your favorite game or sport? • What is your favorite movie? • What is your favorite pizza topping? • What is your favorite restaurant? • What is your favorite season of the year? • What is your favorite sports team? • In which department did you first work? • What was your first position in the company? • What was your first car? etc.
So, just how secure are these questions and your answers? I have to say “NOT”.
Experts have claimed that the majority of personal identity theft cases are done by people the victim knows or has had some contact with (spouse, family member, co-worker, friend, and neighbor). So if your security is based upon questions like these don’t you think that the odds are good that others also know these answers too? But all is not lost.
Who says you have to give the correct answer?
If the question is, “Who is your childhood friend?” Answer: “Boston Red Socks”. So if your business relies on these type of security challenges, tell your users that they don’t have to give an honest answer.
