NIST now recommends against their usage. Why is Apple still using them? With the ridiculous data breaches we keep seeing it is stupid to continue to use pre knowledge questions to verify someone's identity. I can't change "the street I grew up on" or "my childhood nickname".
Apple, wake up and get rid of these questions - they don't enhance security and in fact hinder it.
life359 wrote:
NIST now recommends against their usage. Why is Apple still using them? With the ridiculous data breaches we keep seeing it is stupid to continue to use pre knowledge questions to verify someone's identity. I can't change "the street I grew up on" or "my childhood nickname".
Apple, wake up and get rid of these questions - they don't enhance security and in fact hinder it.
Apple only uses them if you don't implement two-factor authentication. Apple has been strongly recommending this change for a couple of years. And, I believe, if you create a new account, 2FA is required.
Apple doesn’t routinely monitor the discussions. These are mostly user to user discussions.
Send Apple feedback. They won't answer, but at least will know there is a problem or a suggestion for change. If enough people send feedback, it may get the problem/suggested change solved sooner.
you are 100% correct
Why is Apple still asking pre knowledge security questions?
