Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is where "security questions" can be useful; neither the question nor answer need to be real, and the more outrageous the better.

"You're my daughter? Then tell me the name of your twelth pet centipede."



For voice scams this is critical. I set up duress codes with all of my non technical and elderly family and close friends last year.

It should be a simple, pink-elephant-type nonsense question and answer that you rehearse a few times in person and make sure they never share with others. “Q: What’s your favorite leprechaun? A: Rutabaga” or something. Even cognitively impaired folks can, with a few rehearsals over a day or so, retain that easily, I’ve found.

Reminding them to practice it when people reach out pretending to be me takes a bit more rehearsal, but I’ve found that it sticks reliably even then.


I use "Queen to queen's level 3" and then wait for the appropriate response.


The answer is easily found by Google, and any AI could give the correct answer instantly.


And that's why you teach your elders the wrong answer for a right question! :D




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: