LSI Security Question Fail
I was trying to register for access to the LSI download center and in the process I ran across a very interesting security question: Gee, guys, if I knew what my password was I wouldn’t need the security question. I also enjoy “What is your mother’s last name?” Consider that a disproportionate number of IT staff are men, and that, at least in the USA, women of my mother’s era usually took their husband’s last name. It’s highly probable that my mother’s last name is the same as mine… This is all on top of the fact that it’s asking for passwords and such without SSL. I think it’s safe to say that your security is not their priority.