Secrets, Lies, and Account Recovery¶
Bonneau. (2015). Secrets, Lies, and Account Recovery. Proceedings of the 24th International Conference on World Wide Web.
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Domain-specific¶
- Authentication Failure
- . Account recovery as backdoor — forgotten-password flows relying on knowledge questions, email-only resets, or weak helpdesk verification, frequently the path attackers actually use because it accepts lower evidence than the front door
This sourceGoogle-scale measurement of personal knowledge questions finding them both guessable and poorly remembered, with a security level far lower than user-chosen passwords, so they should not be used alone.
Supported in partVerified against the publisher's abstract
“Our analysis confirms that secret questions generally offer a security level that is far lower than user-chosen passwords.”
- . Account recovery as backdoor — forgotten-password flows relying on knowledge questions, email-only resets, or weak helpdesk verification, frequently the path attackers actually use because it accepts lower evidence than the front door
Verification¶
Does it exist? Not checked yet. This work's DOI is recorded above but has not been resolved against an external catalogue, so nothing here confirms the work exists.
Does it back the claim? Read against the text for 1 of 1 citation: 1 supported in part. Each verdict is shown under its citation below, with what in the work backs the sentence.
Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.
See how references were verified.
Registry ID ref:90facdf6ea10 · see in the full table