I hate them so very, very much. Listen: if you want to set up a system whereby people can have their password reset or sent to them, then there is one way and one way alone you should proceed, and that is to have them provide an email address. If you ask them to put in a Super Secret Question!!!!! then don’t be surprised if some irate customer ends up throwing you under an elephant marching band.
I’m setting up an account now, and the options I have are:
- Last four characters of driver’s licence
- Father’s city of birth
- Mother’s maiden name
Are these secure? No they are not. So as usual I’m going to put in some random nonsense answer, then I’m going to get drunk and forget everything and be locked out forever. And sure, I could cut down on my drinking or write down my passwords or whatever, but that shouldn’t be my responsibility, and I resent having some website sitting there judging me on my failures. So webmasters, please… help me out here.
Recent Comments