Tuesday, April 29, 2014

Be Secure - Know Security

I work for the IT service desk at a local college.  A good portion of my job involves helping clients with log in issues.  This invariably will involve security questions at some point.  I want to list a few things it is important to know regarding security questions. 

1).  You will be required to set up security questions.  These are a necessity if you should ever require assistance from the Service Desk.

2).  A sibling would be your brother or sister.  If you are an only child you do not have a sibling.  Having a son or daughter is not the same as having a sibling.  

3).  Regarding siblings:  if the question pertains to your 'oldest' sibling and you are the oldest child in your family, you might be confused.  You do have an oldest sibling - it would be the one who is closest in age to you.  If you still find this confusing, go with another question.

4).  Regarding security questions.  It is necessary that you know the answers you choose.  They don't have to be the right answer.  We aren't going to be checking up to see if you answered correctly or not.  We have no idea where your mother was born.  If she was born in Timbuktu and you answer Alaska it doesn't matter.  All that matters is that Alaska verifies when we type it in.  

5).  If your favorite color depends on the day of the week, it probably is not a wise idea to choose that for your security question.  If your favorite color is purple on Wednesday and you call on Friday when your favorite color is magenta, chances are we won't be able to verify the answer.

6).  On the same note: don't choose who is my boyfriend when choosing a security question unless you are pretty secure in that relationship.  Chances are that when you call me six months to a year later you will be telling me that you don't remember who you were dating when you set the questions up. 

7). Also, asking the question "what is my password" probably isn't the smartest question to ask.  If you knew that you wouldn't be calling me now would you?

8).  If you have never had a pet then don't choose the question "what was the name of your first pet".  Likewise, if you have had pets to numerous to mention this is not a good question.  

9).  If you did not know your father very well (perhaps he died before you were born or your parents divorced) then don't choose the question "what is my father's middle name.  Some people who are very close to their parents don't even know the answer to that.  

10).  One other thing, it is usually very important to know how you answered the question "what street did you live on in third grade?"  If you lived at 1397 South 148th East Avenue it might be better to choose another question unless you can remember exactly how you entered the answer.  Did you abbreviate any of those words?  Did you use any type of punctuation? Did you even enter anything other than 148th?  

Bottom line is:  make the answers something you can remember.  If you want to make the answer to all your questions the same - that is fine.  We won't grade you - we only care if you know the answers. 


  
 And hats off to those of you who make my day when you call.  Perhaps the guy who only had one question in place.  We require three questions.  The one question he had was "why did I divorce my wife?"  Man, I seriously wanted to ask that just to find out the answer.  But then I would have had to say 'oh to bad that's the only question you have in place.  We need three to be able to assist you."  

Or perhaps the one that asked "how much wood would a woodchuck chuck if a woodchuck could chuck wood?"  Yep, the correct answer is 'as much wood as woodchuck would chuck if a woodchuck could chuck wood".  

Or maybe the student who puts in 'where did I meet my wife' as a security question.  Upon asking that he replies " I'm not even married."  

No comments:

Post a Comment