Apple Enhancing Apple ID Safety by Enforcing Security Question Requirements

MacRumors · Apr 12, 2012

The Next Web reports that Apple has begun enhancing the security of users' Apple ID accounts, requiring those who have do not have alternate email addresses and security questions on file to add them.

In the past 24 hours, Apple appears to have started prompting iOS devices owners and those with Apple IDs within iTunes to make their accounts more secure, requiring them to pick three security questions and enter their answers when they download a new app.

The company is also asking users to enter a backup email address, in order to better protect their device but also their account (which is tied to Apple's Retail website and all of its media services).

Hacking of iTunes Store accounts has been a long-standing complaint from a number of users, but with over 225 million user accounts, they make for a popular target for phishing, brute force hacking, and other methods. The company has occasionally taken steps to improve account security such as last August's addition of confirmation emails when content is purchased from a previously-unused device, and the company undoubtedly evaluates its security practices on an ongoing basis.

Article Link: Apple Enhancing Apple ID Safety by Enforcing Security Question Requirements

FloatingBones · Apr 12, 2012

Does Apple suggest that you not put answers to your security questions that can be looked up from public sources -- like a Facebook account?

Do users realize that the best strategy is to give non-sequitur responses to this kind of question: The first school you attended was: tangerine trees.

3282868 · Apr 12, 2012

How about combining multiple ID's? It'd be nice as over the years many have used different email addresses, etc. and having to enter/authorize all of them is a PITA.

ZipZap · Apr 12, 2012

How about, who needs this added security. Annoying.

dethmaShine · Apr 12, 2012

FloatingBones said:
Does Apple suggest that you not put answers to your security questions that can be looked up from public sources -- like a Facebook account?

Do users realize that the best strategy is to give non-sequitur responses to this kind of question: The first school you attended was: tangerine trees.

The question is: Do you actually put in right answers for these questions? Obviously, I don't.

benspratling · Apr 12, 2012

I hate this feature

The limited questions annoyed me to no end the other night trying to figure out what to do since I could only remember the answers to 2 questions "What was your first car" and "what was your favorite car?" and it wouldn't let me give the same answer to both... I had to make up answers to other questions then program them into my keychain app! Geess.... Then I had to have a second e-mail account? This is just rubbing me the wrong way.

MasterHowl · Apr 12, 2012

ZipZap said:
How about, who needs this added security. Annoying.

It would be more annoying if your Apple ID got hacked

miles01110 · Apr 12, 2012

FloatingBones said:
Do users realize that the best strategy is to give non-sequitur responses to this kind of question: The first school you attended was: tangerine trees.

Right, because inevitably your first reaction to your security questions after you forget your password is "Why yes, my first school was tangerine trees."

StealthGhost · Apr 12, 2012

I just wish I didn't have to put it in every time I download or update an app. Maybe there is a way to avoid that, I haven't looked in a while, but it would be nice.

57004 · Apr 12, 2012

I hate this... Security questions are useless if you use good passwords. They actually make it easier to hack an account because they are usually things found out pretty easily.

This is only good for those people that use stupid passwords like the names of their children, dog, or top-100 common ones like 'sunshine' or 'password'.

ed724 · Apr 12, 2012

Quote:
Originally Posted by FloatingBones View Post
Does Apple suggest that you not put answers to your security questions that can be looked up from public sources -- like a Facebook account?

Do users realize that the best strategy is to give non-sequitur responses to this kind of question: The first school you attended was: tangerine trees

dethmaShine said:
The question is: Do you actually put in right answers for these questions? Obviously, I don't.

Wow, as in "non-sequitur", maybe ?

JohnDoe98 · Apr 12, 2012

Back-up email? Seriously? I don't have a need for multiple email addresses, one suits me just fine.

GSPice · Apr 12, 2012

It's sad how the terms "hack", "hacked", "hackers" have been mutilated with the advent of online accounts.

pgiguere1 · Apr 12, 2012

I hope my iPhone won't start to constantly ask me to answer those questions just for me to use it normally.

Ever since I got iTunes match, my iPhone already asks me to type my Apple ID password several times a day just so I can play music (not sure if bug or feature).

Exhale · Apr 12, 2012

If I understand it correctly, the questions are used only when you have already logged into the account in question - in which case it does slightly improve security.

If I understand it incorrectly, the questions are used more traditionally (e.g. "get back my account"). In that case, it only worsens the security situation - since questions like this are often the easiest way to 'crack' an account to begin with.

HornetMontana · Apr 12, 2012

Dual Core In The Sun

[deleted]

eyebex · Apr 12, 2012

Hey, I went to tangerine trees.

rivertrip · Apr 12, 2012

How does a back door into the account enhance security? The author of the article would provide a service to readers if he explored the real reason for the change.

iEvolution · Apr 12, 2012

I've never answered these questions seriously, I've always found that these security questions make an account less secure from people that know you and unfortunately people you know may want your info more than people you don't know, i.e. a insecure girlfriend or ex.

Excessive if they are trying to make you answer three questions plus password on every purchase, if they want to boost security increase password length and special requirements (such as three lowercase letters, three uppercase, special character and a minimum of 10 characters), or maybe add a second password.

jimboutilier · Apr 12, 2012

I get the reason behind extra security for new devices and like the way Apple (and many other companies) have been doing this.

But having to to type in multiple extra responses beyond your account password simply to update an existing or new app on an existing device is ridiculous.

They better start doing a lot better job QAing apps to minimize updates or its going to drive business away.

iEvolution · Apr 12, 2012

miles01110 said:
Right, because inevitably your first reaction to your security questions after you forget your password is "Why yes, my first school was tangerine trees."

Point is with the internet so connected these days chances are people can find out the answers esp. With social sites like facebook.

Rogue. · Apr 12, 2012

Great... Another hoop I have to jump through just because people are dumb enough to keep falling for phishing attempts that ask them for their login details!

You people deserve what you get

Blorzoga · Apr 12, 2012

FloatingBones said:
Does Apple suggest that you not put answers to your security questions that can be looked up from public sources -- like a Facebook account?

Do users realize that the best strategy is to give non-sequitur responses to this kind of question: The first school you attended was: tangerine trees.

Tangerine Trees!? What year did you graduate?

mactmaster · Apr 12, 2012

Exhale said:
If I understand it correctly, the questions are used only when you have already logged into the account in question - in which case it does slightly improve security.

If I understand it incorrectly, the questions are used more traditionally (e.g. "get back my account"). In that case, it only worsens the security situation - since questions like this are often the easiest way to 'crack' an account to begin with.

This might be true, years ago I did this with Woz's .mac account but it was only one security question to guess correctly and the answer was simple... I didn't do anything malicious with it and let him know to change it but yeah they can be dangerous.

Blorzoga · Apr 12, 2012

JohnDoe98 said:
Back-up email? Seriously? I don't have a need for multiple email addresses, one suits me just fine.

Unless of course you forget the password to that email account and need to retrieve it by having an email sent to a different email account that allows you to reset your password.

Apple Enhancing Apple ID Safety by Enforcing Security Question Requirements

macrumors bot

macrumors 65816

macrumors 603

macrumors 603

macrumors 68000

macrumors 6502

macrumors 65816

macrumors Core

macrumors regular

Cancelled

macrumors regular

macrumors 68020

macrumors 68000

macrumors 68020

macrumors 6502a

macrumors newbie

macrumors member

macrumors member

macrumors 65816

macrumors 6502a

macrumors 65816

macrumors regular

macrumors 68030

macrumors 6502

macrumors 68030

Our Staff