They did not set the world on fire with their state of the art authentication though. As far as I can tell, they still think that a secret question is a second authentication factor, and they regressed significantly by prohibiting me from creating my own questions. I used to have a secret question like ‘Who is Z's5.'vYCf!.v/Zu31wkJYjR’ with an answer something like ‘y=t0FgZtH+CMPS-!tjLB_Cac’.
Now I’m stuck with:
This is really unfortunate. Of the 20-odd questions, at least 11 of them are available via ordinary public record searches, searchable ancestry records or social networks, and some of the remaining questions have limited entropy. In my case, various relatives of mine have published enough family history that all of the ancestry related questions are unusable for identity verification. The selection of questions is really poor.
I certainly hope that the credit union customers are smarter than the service providers and take it upon themselves to compensate for the service providers incompetence by fabricating nonsensical answers to the questions.
I also hope my long gone grandfather isn’t too put off by my assertion that his occupation was ‘.oUDq9%Y^yP7dRJoM9TTSG’ .
