New Security Questions

There are no questions from the second or third group foe which I could rely upon giving a consistent question.

I wonder whether I could remember "apple is stupid" as the answe to all 3 questions?

FIX THIS!

Not impressed with the introduction of these new security questions. If we have to have them, they need to increase options or preferable let us create our own questions.

I tried picking the car question each time with the same answer for each one but your not allowed to do that either.

My work around has been to select the car question each time and have 1blank1, 2blank2, 3blank3 as my answers. Oops, thanks alot apple for the security. Just gave away my answers!!!

<Edited by Host>

I totally agree. These are questions I would expect from a 12 year old, not Apple. WTH. I am not a programer, but showing your hand or telling the world that youse "standard" encription sounds like your not even trying. I guess I'll turn off the "one click"... I guess contacting the app designers and telling them about the Apple SNAFU and how it affects each of us might get some responce but I am not sure how much. It begs the question, "What Would Steve Do?" (WWSD). This thin vail of security is not what we have come to expect from Apple... This is a slap in the face to Apple users world wide. I am sure there is a better way.

Ok so what is the work around on this? Does turning off the "One Click" really work? Are these "security questions" the bannana peel Apple will slip and fall on? I hope not.

So now to find where I turn off the "one click" setting....

In my case, one-click is off, and I still get the inane questions

File your complaints with apple at the following link.

http://www.apple.com/emea/support/itunes/contact.html

Here is mine.

I have set up my iTunes account about 4-5 years ago and have now come across a new set of security questions. I want this level of security turned off on my system as the questions are not relevant to me and would not help me answer them should it be necessary. Have you read the Apple Support Community forum on "New Security Questions"? What is the point of these questions when I already have answered the same type of security questions to set up my account? This level of security is NOT necessary once I am in iTunes only trying to make an app (a FREE app) download. Then I have to have an additional email address, and can not use the Apple ID email address, for the recovery of my iTunes answers?????? No. I will not do it. This is not what I and currently 1157 other users find acceptable and Apple Like. I suggest you remove this in application security or risk loosing not just my business in iTunes but others as well.

I also wanted to address the statement that appears at the bottom where Apple claims to use "industry standard encryption". I find this distributing as now a hacker knows what level of hacking technology is needed to break in to an iTunes account. You had something so great and working so well and this so called security level totally screws it up.

I can no longer download any apps. Every time I try to,I put my password in then window pops up saying security info required. So I click continue and put in my password again.

But my pass is no longer working, It just keeps asking for my password.

I would love some help.

Thanks.

ikr im so sick of it

This is such a poorly thought out implementation. First, they give no announcement about it until you try to buy something, so my first assumption was that this was a phishing attempt.

More importantly, when this came up it made me contemplate all that would happen if I did not go along: I could not buy anything more in itunes; I would lose access to anything in the cloud I haven't downloaded; I would eventually lose access to everything I've bought on itunes because at some point I would not be able to authorize a computer or device; i would lose the ability to buy iphone apps; i would lose the ability to update iphone apps; i would probably lose the ability to update my iphone ios; ditto all that for my apple tv, the second iphone on my account, the two ipads on my account, my macbook, and my imac.

So what apple has done has pretty much given me the opportunity not only to contemplate the useless (and sometimes changing, depending on my mood or the date) information they want from me in their security questions--a couple of which evoke unpleasant memories I wasn't up for considering today (my 'least favorite teacher' was probably the one who molested me when i was 10)--but they've made me consider the extent to which the devices and digital products I have purchased from them become useless or inaccessible the moment I decide to stop jumping through whatever hoops they design for me. It hadn't occurred to me before, with regard to all my devices and downloads at once, that for all I have paid for them I don't really 'own' them outright; their use will always depend on my agreement to whatever terms apple sets from here on out; they can lock me out as soon as I stop playing along.

So I answer security questions that mean little to me, and I take a screen capture of them and their answers to email to me and my partner in case we ever need them (which kind of erases the 'security' aspect).

But did apple intend that it would make me ask myself a few other questions about my relationship to their products?

Responce From Apple:

Dear ******** ,

Welcome to iTunes Store Customer Support. My name is Sumeet. I am glad to help you.

I understand that you are concerned about the new security system of the iTunes Store account. I appreciate your decision of contacting us to have this concern addressed. It's my pleasure to be of help for you today.

******** , I would like to inform you that from time to time, Apple enhances the security of our valued customer's iTunes Store accounts. I apologize for any frustration this has caused, and I assure you that the recent changes are not meant as an inconvenience, but rather to help safeguard your account details and activity. Apple is pleased to provide this feature and hopes that keeping your safety in mind, will help you to better enjoy the iTunes and App Store.

With this new system in place, when a purchase is attempted from a new device or computer, the store selects, at random, two of the three challenge questions for your Apple ID to verify that you are the account owner. If the questions are answered incorrectly ten times, your account becomes temporarily locked. When your account is locked, you cannot make purchases using any device that has not previously used the Apple ID. It also prevents you from changing your challenge questions. However, you are still able to make purchases using a trusted device.

At this time, in order to add this feature to existing iTunes Store accounts, Apple had to pre-set the questions on your Apple ID. If you are unable to clear the security questions, I can clear the challenge questions for you.

Once I do this, you will be able to sign in and add your own challenge questions. You will also have the option to enter a "rescue" email address. This option will allow you to send a message to the rescue email, should you forget the answers to the challenge/response questions in the future.

********, in order to clear the questions for you, Apple requires that you provide at least one of the following, for your security:

- the order number of one of your purchases

- the last four digits of the credit card used for your iTunes Store account

And two items from this list:

- your birth date

- the billing address listed on the account

- the phone number on the account

Upon receiving your response, I will verify your information and clear the pre-set challenge questions.

Once again, I apologize for any inconvenience this situation has caused and I look forward to your reply.

********, Apple recognizes that no one is better qualified to provide feedback about our products and services than the people who use them. I urge you to submit any feedback you have about the security system at Apple's Feedback page:

http://www.apple.com/feedback

Your efforts to share your feedback are very much appreciated.

Thank you for your understanding and for being a valued iTunes Store customer. Have a nice day!

Sincerely,

Sumeet

iTunes Store/ Mac App Store Customer Support

Please Note: I work Saturday to Wednesday, 03:00 AM - 12:00 PM CST.

Thank you for allowing me the opportunity to assist you.

I have had a pretty much word for word response exactly the same as yours when I contacted iTunes support.

It's not exactly clear what they mean. Are they prepared to erase the pre-set questions or not?

I got the same message. Since email is an insecure transfer (non-ecrypted at various points on the path), I'm not about to email the requested data. So, either A) I make up answers and store them some place copy and pasteable on my iPod or B) I give up on the store. Lethergy votes for option B :-)

i got the questions today, only problem is after i did them, i press ok and it says can not be completed try again later been doing that all day.

ricfromtucson wrote:

I got the same message. Since email is an insecure transfer (non-ecrypted at various points on the path), I'm not about to email the requested data.

I made the same argument to them some time ago about another issue - they want you to supply a load of personal information by e-mail including DOB and address by e-mail. Crazy. What's more they wanted my store password so that they could trest drive the account to identify the problem! No chance.

My Reply to Apple.

"Sumeet,

I have provided items in question in the past and the personal questions when I set up my iTunes and Apple ID account. These new security questions are useless and childish. There is no place to write your own questions. Why should I have to print out the page or take a screen capture to remember the questions and answer? That is not security to me. Security to me is keeping the answer in my head not a desk drawer or pocket in a back pack. I have provided all the information you asked for in your response to me in the past. If I am trying to down load a FREE app what purpose would you have for needing my credit card info? Apple is the most innovative computer company I know and this type of challenge question system is far beneath Apples abilities in providing a quality product. Look at my Apple ID, I have already set up my challenge questions. I am not willing to provide my personal information to answer a challenge question or to fake an answer to the challenge questions. I clear the data from my computer weekly, so according to you every week I have to answer a challenge question. I travel out of the country (USA) regularly so if you receive an unknown IP address I have to answer the challenge question(s)... So I am stuck answering the childish mundane questions some programer picked out. No thanks. If this is the best Apple can do I think my only option is to discontinue using iTunes to download apps or media.

As for the "rescue" email address I don't see a need to have an additional email address just to recover my info. I gave Apple my email address when I set up my Apple ID, whats wrong with using that address? Sumeet I don't understand why all the security is needed IN the app. I would understand if it was to enhance the access to the app, but not in it. There needs to be an opt-out option. Have you read the Apple Support Community New Security Questions Forum? When I called tech support this weekend the tech I spoke with did not even know about the "enhanced security" you have put in place. People are ****** off at Apple and iTunes for this. The new security questions are even causing some people to dredge up repressed memories of being molested. Is this your intent? All of this was done without advising the general public, your iTunes users, the people who pay your salary, of the impending implementation of the so called security measures. This makes me question is it really security or something else.

So I ask is the security attached to the Apple ID in a state that it can be compromised?

If not, why would you not attach your security to that of the Apple ID?

Are hackers circumventing the Apple ID security in wifi or other internet connection modes?

If yes, what steps is Apple taking besides that childish security questions to prevent Apple ID information from being compromised?

If I have authorized my devices with my home computer, would that not be enough conformation of proper authorization for use in iTunes?

If I clear my personal data from the computer and have to log in several times a month would that set off alarms in Apples systems that could lock me out of my devices and or iTunes entirely?

I look forward to hearing back from you soon. You have access to the Apple ID and can find my phone number within your system.

PS.

I never give out my personal information in an email and never will. "

Never, ever, give out your personal information via email... N E V E R!