Wednesday, June 24, 2009

Vulnerable Account Questions

A study by Microsoft Research shows how easy these secret account questions can be to answer. A fifth of the time 32 Web mail users were able to correctly answer each others questions allowing access to accounts. Microsoft suggests confiding a friend to vouch for you in case your account becomes locked.

Email accounts can allow hackers to other accounts such as eBay, through password reminders. The hacker can then make purchases from these accounts because most email providers have secret questions leading to accounts.

Stuart Schechter and Rob Reeder from Microsoft proposed that users can select "trustees" who would receive an email with a "recovery code" that the user must collect to unlock their account.

This was a well written and easy to follow beat, medium in length with short breaks for the easy read. It had little repetition but I believe that it's importance needs to be stressed.

No comments:

Post a Comment