What Security Question means to security…?
Recently, one of my friend‘s face book profile was hacked. You know why...? His security question was-“What is your name..?” Stupid enough right..? Most of our social networking sites drain out a significant amount of money, computing capabilities and other resources for enabling security. But I strongly believe that Human is the weakest part of security and my conviction grows stronger day by day. Many users maintain weak security questions. On an average 1 out of every 10 Facebook accounts are hackable just because of this vulnerability.
Any online account has two elements – a login ID and a password. Login ID help the server to identify the account and the password helps the server to make sure that it’s providing access to the right guy. Maintaining a strong password (About Strong passwords, I’ll post soon) is essential for security. Cracking a strong password by guessing is as hopeless like searching for a needle in a haystack. But for an attacker there is an easy alternative – ‘The Security Question’.
The security question is a question which if answered by someone they could get access to an account either permanently or atleast temporarily. Maintaining a good security question is a million times as important as maintaining a good password! This is because; always an attacker has better chances of guessing an answer than an arbitrary password. Most often people have security questions like – “What’s my Phone number” or “What’s my Living Place” and most often such information are publicly visible on their profile’s. In that case even kid’s won’t find a difficulty in hacking u down! Well to maintain a good security question follow these tricks :
- Choose questions you can answer consistently. If you answer the security question "What is your favorite hobby?" with "golfing," the system will reject "golf" in the future.
- Use one-word answers whenever possible. Avoid qualifiers such as "the," "and," "inc.," "co," etc.
- Note the emphasized words in the questions. For example, if your security question is "What is your current best friend's FIRST NAME?" don't put "John Smith."
- Be careful with people's names. When using a friend's name as an answer, make sure to use his or her familiar name. That is, if you call your friend "Jimmy," don't use "James" as your security answer.
- Pay attention to instructions. If the question asks for your wedding anniversary, note the preferred format (MMDD).
- Be careful with spaces. If you use "El Paso" as an answer to one of your security questions, the system will reject "ElPaso."
- Avoid using quirky or nonsensical answers. You probably won't remember them later.
- Do not use profanity
Comments