me: No, it's fine; I use a different, random birthday for each site and a UUID for every security question. I just save it to my password manager and I'm fine.
infosec expert: Oh, brilliant! What password manager do you use that supports that?
me: Notepad.
infosec expert: 
normal people: it's my birthday infosec experts: THAT WAS HIGHLY SENSITIVE INFORMATION. DO YOU HAVE ANY IDEA HOW EXPOSED YOU ARE normal people: my dogs name is Jack infosec experts: YOU'RE GONE. DONE FOR. IT'S OVER
-
-
-
“Pastebin!”
- 2 more replies
New conversation -
-
-
Normal People: Hey I grew up on 79th Street. Did you know Phil. He was my best friend. Infosec Experts: (╯°□°）╯︵ ┻━┻
-
Social engineers: Hey me too, was your mother's maiden name Smith? Normal people: Almost, Sloan! SE: I knew it! Here, want to borrow my phone charger?
- 1 more reply
New conversation -
-
-
Wait infosec experts use their real pets names and not a randomly generated word phrase stored in their password manager?
-
I think some banks might be asking these in person / over the phone, so you're incentivized to give real answers. Flashback to me reading a long random string over the phone to Equifax when asked for my mother's maiden name :p
- 3 more replies
New conversation -
-
-
Anyone else think personal security questions for password resets is a really bad security practice?
-
I teach everyone to lie on these - also helps remembering the answer better I feel
- 2 more replies
New conversation -
-
-
This Tweet is unavailable.
-
You just described LinkedIn though
- 2 more replies
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.