• 1 Post
  • 8 Comments
Joined 2Y ago
cake
Cake day: Jun 13, 2023

help-circle
rss

In the UK in the 00’s there was a well known advert for chocolate that featured a gorilla and… It’s probably better of you watch it yourself

https://www.youtube.com/watch?v=TnzFRV1LwIo




Depends on your definition of secure.

A pen and paper can’t be hacked


On one occasion, yes, over the phone.

The other I was in a web chat on the company’s website and they provided a link to a page on the same website where it asked for the characters


The 2 occasions I can think of, it was characters from my main password. Both were during contact with the Support teams. I no longer have service with either of the companies (due to unrelated reasons)


I do have this with my bank as well, but I have always had to enter a full username and different password before it asks for those


It’s always 2 characters, but I can’t remember if it is the same ones every time


Is it possible to safely check for certain characters in a password?
Basic cyber security says that passwords should be encrypted and hashed, so that even the company storing them doesn't know what the password is. (When you log in, the site performs the same encrypting and hashing steps and compares the results) Otherwise if they are hacked, the attackers get access to all the passwords. I've noticed a few companies ask for specific characters of my password to prove who I am (eg enter the 2nd and 9th character) Is there any secure way that this could be happening? Or are the companies storing my password in plain text?
fedilink