So with the proliferation of deep fakes etc... M and I came up with a "family safe word."

Unfortunate complication: IT IS DEEPLY HILARIOUS AND I CAN'T TELL ANYONE DAMMIT

this is like when my boss said "my current password is based on you and it's very funny and I can't tell you what it is"

It's been 15 years and I am HAUNTED by this

@platypus my bank used to allow custom security questions, so I set one to "what are you wearing?" and the answer to "that's very inappropriate please transfer me to your manager". the first time an customer service rep encountered it they couldn't stop laughing and had to actually transfer to a coworker to complete the call.
@th @platypus I used to have β€œSAUSAGE SOUP” (Yes, this is a thing in Germany) as β€œpassword” for the hotline of a now defunct mobile operator. That quickly answered the question if they can see it or if they have to type it in. It also started every interaction on a lighter note. Especially if spoken with a stern proclaiming tone: β€œWURSTSUPPE!”.
@nblr @th @platypus ooh this looks good, i might have to try this. (the soup)
@robot @th @platypus Curiously the only other kitchen I know of that has a dedicated sausage soup culture is Korea. For historical reasons that has to do with SPAM. And it’s very worthwhile to explore.
@nblr @th @platypus mexico has meatball soup so maybe thats similar
@nblr @robot @th @platypus sausage soup (makkarakeitto, nakkikeitto) is a really common food in finland as well.
@nblr @robot agreed but also look into gumbo
@bug @nblr i forgot about gumbo lol (never forget about gumbo)
@robot @bug @nblr the French have cassoulet, maybe a bit thick to describe as a soup, so stew?
@th Our government official communication box here in Belgium allows you to set a custom title, so I set mine to something resembling "yo this ain't no phishing, man" which is how I now know that the mail I get is official and not phishing.
Took a while to convince my wife these mails were really from our government
@platypus

@peturdainn also another use case for per-account email addresses.

If a "government" mail comes to your address registered with your electricity supplier you know it's a scam.
@th @platypus

@fedops The amount of spam I get at the address I used over ten years ago on the Linux Kernel Mailing List (and only there, it contains "lkml") is... well, it's a lot.

@peturdainn @th @platypus

@peturdainn @th @platypus you know its real government communication and definitely not a scam email when it's addressed to His Excellency Emeritus Petur Dainn, First of His Name
@wilbr the fact that it's quite honest about wanting money from me is also a hint πŸ˜‰
@th @platypus
@th @platypus @jwz
That is brilliant and delightful.
It is also plausibly a contributing reason they changed away from custom questions. Losing too many customer service reps to giggling.
@th @platypus For United Airlines my security question used to be β€œWhat airline's mileage support is the worst?” Sadly they no longer allow user created security questions and answers. Maybe because that one was too predictable.

@platypus @th

Choosing outlandish answers to security questions (I save them in my password manager) is one of the perks of the job.

I managed to get an AWS support person to lose composure reading back the answers a while back, it felt like I won the lottery. A very small lottery, but hey.

@tbortels Yes, I have a number of firstborn children with names like "Pretzel Hammer Bodkin"
@th @platypus My answers to security answers usually goes: "Did you know that security questions are a big security loophole and you should not give me the access?" irrespective to the question.
Once I had to repeat the same sentence three times, because support required me to fill them all in.
@MichalBryxi @th @platypus I once had my security question be "What's a Hemingway?" and the answer was "$2.50, same as in town" and the one time I got to actually use it, the $ caused a validation error
@MichalBryxi Makes a good custom question, too. And the answer wopuld be "Of course I did, so why are you still using them?"
@th @platypus

@MichalBryxi @th @platypus My favorite is citibank, who I'm totally going to name and shame here, asking for a variant "secure password" from their paperwork while I was traveling, which I didn't have on me because that's a business card I never think about. Card locked, alternate plans.

So I get home, dig it out, call them back up, get right in to reactivating my card. "What happened to the secure password thing?" "Oh there's a note on your account that you didn't know it, so we didn't ask."

@th @platypus Congratulations, I laughed like crazy on the floor just due to this post.
@th @platypus Fantastic! When it is only web based security questions, I set them, and the answers, in a language little known outside it's country of origin. Works a treat.
@th @platypus pass phrases that are jokes! It’s genius. Lighten your day and it’s memorable.
@th @platypus Honestly if you're the service rep and you don't transfer this call to an unsuspecting coworker, huge missed opportunity
@th @platypus
Q > "You're not gonna shoot are you?"
A > "Put all the money in the bag, and no funny business"
@th @platypus you utter genius πŸ˜‚
@th @platypus Positively brilliant. several gold stars, and cookies of your choice are available for you.
@miki @platypus @th I want to use that now. rofl
@th @Foxy @platypus Considering the digest came across this and couldn’t stop laughing myself, I totally see how that happened. Congratulations, you win the Internet today!
@th @platypus I put an XSS payload as the name of my yubikey in college and a random engineer reached out to me about it to call me clever.
This Sounds Fun

Discover topics like bank, password, security, meme, question, and the magic of the internet at Imgur, a community powered entertainment destination. Lift your spirits with funny jokes, trending memes, entertaining gifs, inspiring stories, viral videos, and so much more from users like davidaugust.

Imgur

@th @platypus the first time I called in to my credit union, they wanted me to set a passphrase for future phone verification. And I was blanking (forgot I could use a password manager for this sort of thing) and asked what sort of passphrase they wanted. "Well we can provide you with a hint. Like 'what's a book you recommend?'"

...tldr I'm ND enough that favorites are Hard (too strict of a ranking when I love all the things) but I do have some 'confident-i- won't-forget' Anti-Recommendations.

@th @platypus ...So months later, the next time I couldn't fix something online and had to call, the convo went

"Hi, I'm having this problem, my deets are [redacted]."

"And your passphrase?"

"Umm. Is there a more specific prompt for that?"

"'Don't read this book.'"

(laughing because. Oh. Yeah. I will never not be salty about that) "[title]"

"Great, so what I see on your account..."

(In hindsight, why is "What book would you recommend to everyone" even remotely considered secure though???)

@th @platypus slightly less story-worthy, but more like OP's: A former workplace had a room with an electronic lock with numeric passwords that changed every couple of months, always to something that would T9 a word. The one time the password was "dragon" and I couldn't even comment on how "They're usually memorable enough but I can Definitely remember this one" in case someone was listening who did know the password scheme but didn't *currently* have room access... had me vibrating in agh!

@th @platypus πŸ˜† reminds me that my two account recovery questions with a previous employer were

"what's your favourite 50-digit prime number?" and

"what's your least favourite 50-digit prime number?"

I got to use it once, and it was worth it for the disbelieving tone on the other end of the phone.

@FourT4 or even "tell me your password!" and "no, I won't tell you!" @th @platypus

@th @platypus a previous ITSM tool (they fixed it, so I won't name-and-shame... and it was 18 years ago) didn't have a "masquerade as user" feature for their tech support team... the team had access to our plaintext passwords.
I figured this out, and changed my password to "PlaintextPasswordsSuck" (or something along those lines... like I said, 18 years ago)
next time I had to call in for support... the agent "let me just get signed in as you... [beat] [busting a gut laughing] yes they do"

About a month later they updated their systems, and forced a password change on everybody (Still didn't really trust them, but they said they built in a feature for their support to log-in-as-user)

@th @platypus can't stop laughing... 🀣

@th @platypus my old boss set his required security question and answer at Rackspace to be:

Q: How much wood could a woodchuck chuck if a woodchuck could chuck wood?
A: Yes

Every call he had with them began with that interchange.