HR Jetpack

Yahoo Security Questions

This video is premium content

Register or sign in to gain access.

Lesson:

Yahoo Security Questions

Lesson Content

In the concepts section, I referenced two attacks on Yahoo over the last few years. When attackers accessed the user data for 1 billion Yahoo accounts, they were able to obtain: names, email addresses, telephone numbers, dates of birth, hashed passwords, and quote encrypted or unencrypted security questions and answers.

That’s a lot of personal information on a lot of people to take in one sweeping attack. With a breach like this, one of the first things to consider is: “Is the damage contained to this service?”. When a company loses factual data about who you are, it can aid someone trying to steal your identity. And factual information is problematic because unlike usernames or passwords, you can’t change that information if you feel threatened online because it is a part of you and your history.

Of all of the data points stolen, one of the most concerning to me is the security questions and answers. Security questions are something that give many people a false sense of safety while undermining their ability to protect themselves from identity theft.

It’s important to ask yourself: why are they asking me to give answers to security questions? The reason is simple: they are an old fashioned form of two factor authentication.

The best way to prevent identity theft concerns when using security questions is simple: don’t answer the questions honestly. No company is checking to find out if you correctly gave them your mother’s maiden name or city of birth. They don’t need to know which high school you attended or the road you lived on during elementary school. Security Questions and answers are just another layer of passwords. All that matters is that at some point in the future, during an attempt to authenticate your account, that you’re able to give the answer that matches what they have on record.

Since so many sites and services ask the same or similar questions, a breach on one site can allow someone to take control of other accounts in your life. The rolling effect I have mentioned previously where someone gains control to many accounts through a single breach is my biggest fear for anyone online. This Yahoo breach could absolutely have been used to get into someone’s bank account, social network, cloud storage, or other deeply personal services.

The only way to counter this kind of breach is to give different answers to every site that asks security questions. Since this is just another password, use the kinds of random password generation I covered previously, store the answer in a password manager, and move on without worrying about it. The key is to understand that nobody is checking on the answer, and you are free to give it any response you like.

I expect security questions to disappear as a form of security in the coming years, but until then it’s crucial that you understand why they exist, and how best to use them when required while staying safe and protecting your identity.

Michael Wilson

Instructor:

Michael Wilson

Michael Wilson works with small businesses to build and protect their brands online. He is an IT Generalist whose primary services include: Web Design & Development, Cybersecurity Consulting & Training,...

Michael's Full Bio

HR Courses

Human Resources Training Programs

Self-paced HR Courses

The following HR courses are self-paced (asynchronous), and qualify for both SHRM and HRCI recertification credits. These courses are included in the HR Recertification Subscription.

Effective Disciplinary Action Policies and Procedures

Duration: 1 hr 1 min
SHRM: 1.0 PDC
HRCI: 1.0 General

Liz LaForte

Liz LaForte

RFP Process for HR

Duration: 1 hr 19 mins
SHRM: 1.25 PDC
HRCI: 1.25 General

Mark Fogel

Mark Fogel

Organizational Ethics for HR Managers

Duration: 1 hr 30 mins
SHRM: 1.5 PDC
HRCI: 1.5 General

Dawn Tedesco

Dawn Tedesco

HR as a Business Partner

Duration: 1 hr 5 min
SHRM: 1.0 PDC
HRCI: 1.0 Business

Scott Pitts

Scott Pitts

Blockchain for HR

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Michael Wilson

Michael Wilson

HR Strategic Planning

Duration: 1 hr 2 mins
SHRM: 1.0 PDC
HRCI: 1.0 Business

Hayley Buonopane

Hayley Buonopane

Employee Engagement & Retention

Duration: 1 hr 4 mins
SHRM: 1.0 PDC
HRCI: 1.0 General

Hayley Buonopane

Hayley Buonopane

HR Metrics That Matter

Duration: 1 hr 16 mins
SHRM: 1.25 PDC
HRCI: 1.25 Business

Christina Danforth

Christina Danforth

Finance for Absolute Beginners

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 Business

Anna Samorukova

Anna Samorukova

Change Management 101

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 Business

Hayley Buonopane

Hayley Buonopane

Labor Relations

Duration: 1 hr 42 mins
SHRM: 1.50 PDC
HRCI: 1.75 General

Matthew Kerzner

Matthew Kerzner

Diversity and Inclusion

Duration: 1 hr 25 mins
SHRM: 1.25 PDC
HRCI: 1.50 General

Christina Danforth

Christina Danforth

HR Analytics

Duration: 1 hr 31 mins
SHRM: 1.50 PDC
HRCI: 1.50 Business

Christina Danforth

Christina Danforth

Performance Management: Development & Deployment

Duration: 1 hr 18 mins
SHRM: 1.25 PDC
HRCI: 1.25 General

Christina Danforth

Christina Danforth

The Role Assessments Play in Talent Management

Duration: 2 hr 5 mins
SHRM: 2.0 PDC
HRCI: 2.0 General

Craig Haas

Craig Haas

AI for HR

Duration: 1 hr 3 mins
SHRM: 1.0 PDC
HRCI: 1.0 General

Michael Wilson

Michael Wilson

Compensation 101

Duration: 1 hr 8 mins
SHRM: 1.0 PDC
HRCI: 1.25 General

Pamela Sande

Pamela Sande

Effective Leadership Communications for HR Professionals

Duration: 2 hr 30 mins
SHRM: 2.5 PDC
HRCI: 2.5 General

Christina Danforth

Christina Danforth

Recruiting Strategies to Hire the Best Candidate

Duration: 1 hr 6 mins
SHRM: 1.0 PDC
HRCI: 1.0 General

Lois Krause

Lois Krause

Cybersecurity 101 for HR Pros

Duration: 1 hr 2 mins
SHRM: 1.0 PDC
HRCI: 1.0 General

Michael Wilson

Michael Wilson

EQ Competence: Fostering a Talent Advantage that Drives Organizational Performance

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Craig Haas

Craig Haas

Thinking Lean

Duration: 1 hr 8 mins
SHRM: 1.0 PDC
HRCI: 1.25 Business

Christina Danforth

Christina Danforth

Coaching for HR Professionals

Duration: 1 hr 2 mins
SHRM: 1.0 PDC
HRCI: 1.0 General

Stacey Zackin

Stacey Zackin

The Employment Cycle

Duration: 1 hr 45 mins
SHRM: 1.75 PDC
HRCI: 1.75 General

Christina Danforth

Christina Danforth

Behavioral and Situational Interviewing

Duration: 1 hr 8 mins
SHRM: 1.0 PDC
HRCI: 1.25 General

Stephanie Legatos

Stephanie Legatos

Dynamic Dialogues

Duration: 1 hr 10 mins
SHRM: 1.0 PDC
HRCI: 1.25 General

Stacey Zackin

Stacey Zackin

Employment Law 101

Duration: 3 hr 11 mins
SHRM: 3.0 PDC
HRCI: 3.25 General

Mark Addington

Mark Addington

Thrown to the Wolves: Preparing Your New Leaders to Lead the Pack

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Karen Hinds

Karen Hinds

Introduction to Organizational Development

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Hayley Buonopane

Hayley Buonopane

Practical Meeting Preparation: Getting Ready for a Productive Meeting

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Christine Gatti

Christine Gatti

Succession Planning: Build Your Bench

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Hayley Buonopane

Hayley Buonopane

Practices for Hiring Successfully

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Hayley Buonopane

Hayley Buonopane

Team Development: Building Collaboration & Effectiveness

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Christine Gatti

Christine Gatti

Leading and Managing the Need for Both

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Hayley Buonopane

Hayley Buonopane

Coaching: Guiding the Management Team

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Hayley Buonopane

Hayley Buonopane

Being A Change Agent

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Hayley Buonopane

Hayley Buonopane

Leading a Multigenerational Team

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Karen Hinds

Karen Hinds

Multi-Generational Workforce: Problem or Competitive Advantage?

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Christine Gatti

Christine Gatti

Virtual Reality: The Future of HR

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Christina Danforth

Christina Danforth

Unconscious Bias: Impact on Recruitment and Retention

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Christina Danforth

Christina Danforth

Business Fundamentals for HR Pros

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 Business

Jack Antonich

Jack Antonich

Influence and Communications as an HR Pro

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Stacey Zackin

Stacey Zackin

Value Based Decision Making for HR Pros

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Stacey Zackin

Stacey Zackin

Strategic Planning to Support HR Initiatives

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 Business

Dr. Deborah Osgood

Dr. Deborah Osgood

Meet in the Middle: Best Methods for Conflict Management

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Christine Gatti

Christine Gatti

Economics for HR Professionals

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 Business

Jack Antonich

Jack Antonich

Business Plans: Why HR Pros Should Care

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 Business

Jack Antonich

Jack Antonich

Emotional Intelligence: What is it and Why Does it Matter

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Christine Gatti

Christine Gatti

Marketing/Selling Continuum (From Idea to Revenue)

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 Business

Jack Antonich

Jack Antonich

Diversity Equity & Inclusion The Lens We Wear

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Stacey Zackin

Stacey Zackin

Welcome! What HR can Learn from the Field of Hospitality

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Stacey Zackin

Stacey Zackin

Accounting and Financial Reporting for HR Pros

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 Business

Jack Antonich

Jack Antonich

How HR Can Establish & Influence a Culture Of Hospitality

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Stacey Zackin

Stacey Zackin

Raising Capital (Who, What, When, Where, Why & How)

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 Business

Jack Antonich

Jack Antonich

Cultural Competence: Fostering Diversity Equity & Inclusion

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Stacey Zackin

Stacey Zackin

DiSC Communication Styles: What are They & How They can Help You

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Christine Gatti

Christine Gatti

Effective Meeting Facilitation for HR Pros

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Christine Gatti

Christine Gatti

Best Practices in Providing Effective Performance Feedback

Duration: 1 hr
SHRM: 1.0 PDC
HRCI: 1.0 General

Christine Gatti

Christine Gatti