Hacker News Reader

The entropy of multiple choice selections is easily calculable and very low.

number of options * number of questions

This is essentially the same "password reset questions" loophole that allowed the apple cloud storage hack on a bunch of celebrities.

View on HN

I didn't say to use it by itself. I said that your OTP would be required first to even access it. And of course you could provide backoff. And then you'd also have to be answering a series of multiple choice questions all correctly.

I dunno, just a thought, but do you get what I'm saying about recognition vs recall? Why don't we have the computer test us about things we're good at if part of the test has to be something only our individual brain is capable of?

Reply on news.ycombinator.com