[ARS] Windows 10's new "Security Questions" considered harmful.

[VirtualLarry]

https://arstechnica.com/information...loit-win-10-security-questions-open-backdoor/

I hate stupid security questions. They are (most times) insecure, more insecure than the primary password, and on most web sites, MUCH harder to change.

What they SHOULD do, is acknowledge the fact that these are really just "secondary passwords", and treat them as such.

 

[mikeymikec]

I disagree with the premise of the article. Security questions are a heck of a lot easier for uneducated users to deal with.

For example, a customer recently lost access to her Google account permanently after neglecting to update her Google account with her new mobile number then forgetting her password. Google then resorts to questions like "enter the e-mail addresses of people you've recently e-mailed, to which most non-tech-savvy users would answer "how the f*** would I know the e-mail addresses, I don't have access to my mails!", and my personal favourite question, "when did you create your Google account?", being one that even I am unable to answer for my own accounts. It's hardly a memorable occasion now is it?

That's aside from the fact that quite a few of my customers don't have a reliable mobile signal at home. I tried MS's "ring a landline" option before but it doesn't appear to be quite as reliable as the text-a-mobile service.

 

[mxnerd]

Agree MS's security questions are very stupid & non flexible.

Why not let user either choose standard ones or create his/her own security questions?

 

[killster1]

yes its retarded questions that you would be foolish to answer correctly if you want your computer secure.. but i guess i you have it secure you wont be using windows bawhaha .