Thoughtful Questions or Just a Password Reset?

Description

The image is a screenshot of a tweet from the user 'gabsmashh' (@gabsmashh) on a dark background. The tweet text reads: 'most girls trying to get to know you will ask you boring, shallow questions like "what's up" or "how ya doing" but i like to ask more thoughtful questions. like "what is the name of the street you grew up on?" or "what is your mother's maiden name?"'. The humor is derived from the unexpected twist where the 'thoughtful questions' are instantly recognizable to anyone in tech as standard security questions used for password recovery and account verification. This plays on the constant vigilance required in the digital age against social engineering and phishing attacks. For an experienced developer, it's a wry nod to how cybersecurity concerns have permeated even our understanding of social interactions, making one suspicious of seemingly innocent questions

Common Tags

SocialEngineering Phishing Authentication SecurityAwareness SensitiveDataExposure

Comments

Anonymous ★ Top Pick I'm not saying I have trust issues, but if you ask for my mother's maiden name on a first date, you'd better be prepared to answer with the MD5 hash of your favorite childhood pet's name

Anonymous ★ Top Pick

I'm not saying I have trust issues, but if you ask for my mother's maiden name on a first date, you'd better be prepared to answer with the MD5 hash of your favorite childhood pet's name
Anonymous

She asked for my mother’s maiden name; I replied with a WebAuthn challenge - if you can’t handle a FIDO2 handshake, we’re not establishing a session
Anonymous

The real red flag in dating isn't commitment issues, it's when they ask for your first pet's name and favorite teacher on the first date - either they're planning to reset your passwords or they're using deprecated KBA that NIST deprecated in 2017
Anonymous

When your dating profile doubles as a penetration testing reconnaissance phase. Pro tip: if she asks for your first pet's name and the city where you were born on the first date, she's either really into you or really into your AWS root account. Either way, enable MFA before responding
Anonymous

KBA: the only 'second factor' attackers can brute-force with OSINT and small talk; use WebAuthn
Anonymous

Why phishing emails when Tinder skips straight to password reset Q&A over drinks?
Anonymous

KBA is basically letting an attacker pivot from Shodan to Facebook - ship WebAuthn, not small talk
@zherud 4y

What is the name of your first pet.
@Roman_Millen 4y

"girls trying to get to know you" — what parallel universe is that from? 🤔
@MrZarei 4y

or like : Whats your ex's name 😂
1. @RiedleroD 4y
  
  > What's your ex's name? > Oh really? Well, that's just bad taste then.
  
  @MrZarei 4y
  
  👌😁
@karim_mahyari 4y

What's programming here? Is she a dev or sth
1. @sylfn 4y
  
  read questions again, they are sometimes being used for password restoring
  
  @karim_mahyari 4y
  
  Oh, didn't get that. Thanks
@callofvoid0 4y

seems dark