Hacker News new | ask | show | jobs
by jonreem 2991 days ago
Who in the world thought this was a good idea!? I can hardly think of a less secure way to ask security questions. You should name and shame; there’s a minimum bar everyone should uphold and this is far below it.
3 comments

The problem they were trying to solve is someone typing in “Woodbridge Lane” as the answer and then later typing “Wood Bridge” or “Woodbridge Ln” or “Woodbridge Ln.” when prompted.

This was the wrong solution.

The real problem is that "security questions" are bad security.
Because calculating a Levenshtein distance is to complicated...
Still rather unsafe, right? "Cambridge" would be closer to "Woodbridge" than "Woodbridge Lane".
But randomly guessing Cambridge is not that likely. A bit of a pointless exercise though since security questions are dumb.
Someone who had no skin in the game.
If my bank had such weak security I wouldn't want to tell the internet where I bank.