<story><title>Operation Luigi: How I hacked my friend without her noticing (2017)</title><url>https://mango.pdf.zone/operation-luigi-how-i-hacked-my-friend-without-her-noticing</url></story><parent_chain><item><author>edoo</author><text>Banks and the rest hate me.  I use keypass to generate random alpha numeric &amp;#x27;passwords&amp;#x27; I use for the answers to personal questions.</text></item></parent_chain><comment><author>nothrabannosir</author><text>I have personally experienced a CS rep accepting “it’s just a bunch of random characters” as an answer. Combined with the fact that you just went on the record as using that scheme, your opsec just took a dramatic hit.&lt;p&gt;Use plausible sounding, but random answers.</text></comment>
<story><title>Operation Luigi: How I hacked my friend without her noticing (2017)</title><url>https://mango.pdf.zone/operation-luigi-how-i-hacked-my-friend-without-her-noticing</url></story><parent_chain><item><author>edoo</author><text>Banks and the rest hate me.  I use keypass to generate random alpha numeric &amp;#x27;passwords&amp;#x27; I use for the answers to personal questions.</text></item></parent_chain><comment><author>tvanantwerp</author><text>Got bitten by this when I had to give a 32-character alphanumeric answer over the phone. I groaned and asked, &amp;quot;Can I just give you the beginning and the end?&amp;quot; The rep laughed and accepted my compromise. Since then, I use a collection of random words (in the style of correct-horse-battery-staple) for security questions.</text></comment>