Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Is apple now asking more security questions?

Is Apple now asking more security questions to download an app?

iPad 2, iOS 5

Posted on Apr 20, 2012 9:30 PM

Reply
45 replies

Apr 28, 2012 10:27 PM in response to Philly_Phan

Well if you both cannot have a discussion as an adult there is little hope for you both. And based on the quality of the reponses and the type of response (name calling and ridicule let alone the actual absence of debate) I must be talking with five year olds.


Add something to the discussion children.


To come back to the original point which the children have neglected to understand.


The issue is around the fact that apple is asking security questions that have been poorly conceived, aim to achieve to get additional personal information from us all and thirdly expose us to the risk of this additional information being hacked.


The first problem. These days we all have a significant number of logins to different sites that we visit. Some of these websites have very good security and others have poor security. The problem we have is that a large number of people use poor security themselves - that is they use the same email address, login and password on numerous websites.


Where the problem lies is that a hacker main gain access to one of these poorly secured websites that you have used the same login. All a hacker then needs to do is use that username and password on another website - i.e. Apple and they have access to your account.


Secondly the information such as what Apple are asking for in some of thier questions is similar to that which is used by Banks and other websites for security. The problem that arises from this is that if a criminal/hacker gains access to just one of these sites (i.e. Sony) and has data from a number of other sites (such as the poorly secured sites), and because a lot of people dont have different logins for each website they can easily cross reference this data to gain access to more and more websites that they once could not access. Now your exposed. This is not just this simple login data but also the secuirity questions.


Just because apple has implemented these questions this does not necessarily mean that your account is more safe, but rather only exposes you further to a wider range of potential risk.


Further the criminals set up bots to test logins constantly using this data on thousands of sites every minute and record successes (successful logins).


As a website owner we see this issue every day and we also see that peoples accounts at banks have been compromised by criminals using these simple methods. Further the naive then they cry foul to their bank because they did not have any common sense - probably the same children above. So its all well and good for the children to say that I am whining but in fact they have little idea and people should be more cautious with their personal information. As I said previously said its a shame that the children such as these above are so naive.


If you dont know what you dont know then you should ask questions so you can learn rather than just be ignorant.


So coming back to the point - while increased security is a good idea, the issue here is not that, but rather the implementation - i.e. the poorly conceived security questions to start. Further we have not even touched on the marketing benefits that a number of these questions provide to apple but for the adults reading this I am sure I don't have to spell that out as well.

Apr 29, 2012 6:36 AM in response to lobsterghost1

rbrylawski wrote:


Philly_Phan wrote:


It's a shame that so many people like to whine.


You don't like Apple's desire to prevent others from using your credit card? Shop elsewhere.


By the way, consider your screen name while reading this.

I never even noticed the screen name, but since you pointed it out, we clearly have yet another troll.......

And he comes back to reinforce the conclusion!

Apr 29, 2012 6:53 AM in response to Philly_Phan

No it just means I was hoping to have an intelligent conversation but I was gravely wrong. Its a shame that some people just dont have the intellect and rather remain a child forever. I guess some of us just never grow up and prefer to act like a 5 year old all our lives. Don't throw a tantrum now.


You can lead a horse to water but you can't make it drink.


If you have nothing intelligent to offer the discussion why do you waste every ones time with your childish comments? Add some serious discussion. I dare you to use your brain - just once!


Not to mention you have made an assumption about my sex.

Apr 29, 2012 6:41 PM in response to garyfromalta loma

I don't understand how these questions increase security. Can someone explain that logic to me?


It's my understanding that you don't have to know the original password AND the answers to these questions. You just now need to know one or the other. It seems like asking questions that have obvious answers to you and those that know you well is not an increase in security. A password is supposed to be random and designed to make it difficult for a script to crack it using brute force. It seems like knowing the questions makes guessing potential answers easier for a hacker.

Apr 29, 2012 8:25 PM in response to alexfromvenice

alexfromvenice wrote:


I don't understand how these questions increase security. Can someone explain that logic to me?

In the absence of these questions, when someone forgets a password, there is no way to confirm that the individual requesting help is, in fact, entitled to be allowed in the back door. Apple would have two choices. One, simply give the password to everybody that wants it or two, tell everyone that forgets their password that they can never use their Apple products again. Which would you choose?

Apr 29, 2012 8:38 PM in response to Philly_Phan

That's not true. The current solution to this issue is to have the password emailed to me. I understand why Apple added these questions because for some it's the way they would prefer to gain access to their account. However, I wish they would make it optional and not push it on those of us who are ok with having our password emailed to us as a backup.

Apr 29, 2012 9:11 PM in response to Philly_Phan

Are you actually capable of providing some input into the discussion and some constructive response, or are you only capable of simply being obnoxious and criticizing anyone who has an apple product and has a problem.


The concerns being raised are concerns for a lot of people - even if you don't seem to understand that. To continually criticize people for raising their concerns in a forum designed for raising such questions is simply bullying.


You have now done this with three different posters in this thread alone.


If you cannot actually provide some intellectual discussion go and be a bully somewhere else. If you were face to face with someone I sure you would become a shrinking violet but you seem to think its ok to be a bully behind an anonymous user name. Grow up!

Is apple now asking more security questions?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.