Skip to content

Comment on Challenge-response: the use of incorrect responses in validating identityparent

Comments

The issue with providing an answer that is a meaningful response is that one can in fact guess and often get it right. Second, most sites that use these secret answers (favorite color, first car, ...) don't have a mechanism to lock out after a certain number of incorrect attempts.

My first car is likely something like x78uyipoqA.

Call me paranoid!

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.