Hacker News Reader

Comment by notahacker | Hacker News Reader

Other security questions are often even worse. "What high school did you attend?", for example, is something many friends and acquaintances will know and most others can trivially obtain via LinkedIn or Facebook. "Where were you born?" and "What is the first school you attended?" can be reasonably reliably guessed from the high school as well.

View on HN

This is why you lie.

"Where were you born?" "In the fires of Mount Doom."

"What high school did you attend?" "Methamphetamine High"

This is a good idea, if you remember to always tell the same lie. Being required to remember which website I told which lie to can only lead to trouble.

You could store them in a password database (Password Safe, 1Password, whatever). It takes a little discipline, but it isn't any different from managing passwords in general.

Just stick the question and it's answer in the notes section of your password manager.

Some password managers will generate a pronounceable string for you too, saves coming up with anything witty...

> Just stick the question and it's answer in the notes section of your password manager.

Since security questions are typically used for things like password recovery, you probably shouldn't manage them with the same tool you use to manage passwords. After all, if you need them, it is likely to indicate a critical failure of your access to (or your data held in) that tool.

Gotta stop somewhere.

Reply on news.ycombinator.com