https://master--suspicious-stonebraker-7d2d21.netlify.app/tags/security/ Recent content in Security on Nikhil's blog Hugo -- gohugo.io en-US Sat, 21 Nov 2009 23:28:00 +0000 https://master--suspicious-stonebraker-7d2d21.netlify.app/post/2009/worse-is-better/ Sat, 21 Nov 2009 23:28:00 +0000 https://master--suspicious-stonebraker-7d2d21.netlify.app/post/2009/worse-is-better/ Code Hale shows that sometimes performance needs to be sacrificed for security. Premature optimisation is the root of evil :p https://master--suspicious-stonebraker-7d2d21.netlify.app/post/2007/secret-question-system-is-insecure/ Thu, 12 Jul 2007 23:20:00 +0000 https://master--suspicious-stonebraker-7d2d21.netlify.app/post/2007/secret-question-system-is-insecure/ Seeing that this is so obvious and easily breakable, I'm surprised sites still continue to use the secret question to recover your password. The problem is not so much in the system as in the questions chosen. A really secret question would be one which is known to you and only to you. But usually secret questions involve your mother's maiden name, or your pet or childhood hero. Now to anyone who has known you for a sufficient amount of time, and anyone who has read your profile on one of the social networking sites you are a member of, these are easily answerable.