You can also lie to security questions with joke answers only you understand.
this post was submitted on 09 Feb 2026
673 points (97.5% liked)
Comic Strips
22052 readers
2762 users here now
Comic Strips is a community for those who love comic stories.
The rules are simple:
- The post can be a single image, an image gallery, or a link to a specific comic hosted on another site (the author's website, for instance).
- The comic must be a complete story.
- If it is an external link, it must be to a specific story, not to the root of the site.
- You may post comics from others or your own.
- If you are posting a comic of your own, a maximum of one per week is allowed (I know, your comics are great, but this rule helps avoid spam).
- The comic can be in any language, but if it's not in English, OP must include an English translation in the post's 'body' field (note: you don't need to select a specific language when posting a comic).
- Politeness.
- AI-generated comics aren't allowed.
- Adult content is not allowed. This community aims to be fun for people of all ages.
Web of links
- !linuxmemes@lemmy.world: "I use Arch btw"
- !memes@lemmy.world: memes (you don't say!)
founded 2 years ago
MODERATORS
I use fingerprint technology.
It is so secure, I can't get in, 95% of the time!
Don;t worry the it will work for the feds when they knock you unconscious and put your finger in the scanner.
Childhood friend: Z67!1pQ6fk9
I started this too lmao.
Huh?
Instead of answering security questions honestly, you can treat them as just like another password field.
Ah, thnks for explaining!
That's why I never tell anyone that my first pet was named Llanfairpwllgwyngyllgogerychwyrndrobwllllantysiliogogogoch.
Found a welsh lemmy user.
Nah, just a smartass.
Finnish?
It’s a village in Wales.
Welsh cat! Bapahdahbabapadahdah.
I mean, I just feed security questions as a randomly generated string- password managers will even save that string so you don’t have to remember it.
If you store it in your password manager alongside your password, what's even the point in having these questions?
In some places it is mandatory
... that's an excellent question.
Frankly, even if you don't... what's the point? if you can crack the password, you can probably crack the secret question. or questions.
if you can social engineer a password, same with secret questions.
They're basically just a second passwords. possibly one of many passwords with a prompt.
I'm not even sure how I would store the answers to these questions in a database. Would you hash them like passwords or just store them in plain text (maybe encrypt them, but if someone has access to your servers they can probably access the encryption key too)?
many passwords allow you to store pass keys (like with crypto wallets) as hashes attached to any login credentials. I would suggest storing them that way. at worst, I used to create secondary credentials.
Yeah, it's a little silly if you end up on the phone having to say it to a service rep, but it's better than what's otherwise basically security theater.
I once spent about five minutes explaining my email over the phone — which email has just a handful of letters, but in a weird sequence. Can't imagine having to dictate a random password.
Reminds me of the time when our office got corporate debit cards for everyone, and one dude had his security phrase be eight letters ‘Q’ (or more specifically, a sorta connective letter that can only be at the end of syllables in our language).
The name of my high school crush was "SnorkleBrewersExploringAsphaltBrowniePie" why do you ask?
"Little Snorkly Pie, we called them."
I said my name is Apostrophe Semi-colon DROP USERS.
I enjoy singing "oh ricky you're so fine, you're so fine you blow my mind hey ricky [clap clap] hey ricky [clap clap]" at the service rep and i told them that if i don't sing it or clap that i have failed the security challenge.
it's the answer to what was the color of my first car.
I feel like maybe someone could convince people over the phone to give them access if they explained correctly that the fields have random strings and roughly how they are formatted, but claim to have forgotten what they are
In a properly secure system the rep can't see the code but must type it in to get to your data. If they can get to it without your secret, they can be tricked into supplying it or may abuse their access themselves.
If they're doing it that way then it's dumb for these to be questions about your life because the point of that is to make it things that people will definitely be able to remember, but realistically you're only going to remember the answer in general, not necessarily the specific wording or how the answer was formatted.
For anything properly made the words are not stored in a format the service rep can read, they are hashed
You could convince a cs rep to open it with a sob story and a fake sniffle.
Fortunately, most places have gone away from giving CS repels that kind of access.
load more comments
(1 replies)
My voice is my passport. Verify Me.
i am wearing a wire.
you need to never use the "security questions" ever...
The security questions are often forced.
The trick is to make up answers. Have some go-tos or a pattern that only you know and no one else could guess with information from your life.
Why yes, I did grow up on AmazonFakeStreet. Oh, my spouse? MicrosoftSpouseName of course.
so the funniest thing, we were sitting around at a family reunion. someone asked, so do we all use the same answers for our security questions? and uh, turns out we all do. same made up answers (everyone had the same favorite cat. whose favorite person was me awww yisss), but the same answers. and that moment we decided to update our security procedures.
You get security questions asking you who your "favorite person" is?
Hmm... SELECT * FROM Users WHERE SecurityResponse2 = "*Epstein"
I bet Jesus is a popular answer.
It's the cat, yeah
the trick is q'wdsjfaosdijgoasfgnsdk;jfavfghoiaerjhpguewrhjtiwuerth
never ever put any non-random information there.
i had a 70 year old guy getting divorced, because his wife of similar age "hacked" his email by entering name of their parrot and found out he is emailing with another 70 yo lady.
Ideally you still want it to be something you'll remember, unless you're using a password manager capable of tracking those for you.
The mistake that guy made is that he still chose a name he had some attachment to. You want to make sure you choose something you have no attachment to whatsoever.
And then never reuse the same answer between different services, just in case one of them is storing them as plaintext.
load more comments
(2 replies)
You can't even install Windows (local account) these days without answering 3 of these. If you ever click on one of the recovery options, you'll be asked for one of them.
My solution is usually to just randomly smash the keyboard for a while.
The worst about those is that they only give you 6 questions to choose from, and all of them are really bad as security questions.
They should have had a list of at least 20 to choose from. Preferably the ability to enter your own as well.
install Windows
Well... there's your problem. ;}
No, cause it's at work and not my choice. It's also just one example of many. I don't run Windows on any of my own PCs any more.
load more comments
(1 replies)
load more comments
(1 replies)
view more: next ›