Good Luck Social Engineering My Security Question Answers

Here is sample of how I answer security questions.


I always felt those silly questions were way to easy to guess. Where did I grow up? Really? Who said the answers have to be true or even make sense?
One of my 1Password tricks is to use its password generator to create jibber-jabber responses to these questions. You can do it from the 1Password plugin right in Safari or Chrome.


This makes so much more sense to me. There is no way you are going to figure out my security question answers reading my Twitter stream or (in some bizarre, twisted alternate universe) my Facebook account. Likewise for people who knew me back in the day and happened to grow up in the same place I did.


Just make sure to save your responses to 1Password so when the need arises you can find them. Also, make yourself the mother of all master passwords for your 1Password vault. Not “Pencil”.

Paperless Update and Pricing

I’m busy preparing the next update to Paperless. It will release some time in the next month. When it comes out, you’ll be able to delete the current version from iBooks and download the updated version. You won’t have to buy it again. I’ll post the update notes and details when it releases. There are new screencasts, new sections, the works.

Next week, however, I’m raising the price for new customers to $10 so if you haven’t bought it already, now is the time.

Web Security for the Wary

We’ve all watched the Matt Honan story unravel with dread and fascination. Some smart hackers convinced Apple to reset his iCloud mail password and then used access to his email to wreak havoc on his life.

I suspect this won’t be the last horror story to spawn out of these wild-west days of the cloud. I’m not going to tell you to abandon the Internet but I do think this is a reminder to be careful. The thing that galls us all is that it doesn’t appear Matt did anything wrong. Hopefully Apple tunes up its policies and doesn’t let people play this game in the future.

In the meantime, Lex Friedman wrote an excellent piece about Google and two-factor authentication at Macworld. I’d also recommend looking into Verisign Identity Protection. This free service includes an iPhone app that provides a separate ID code (on a 60 second timer) for logins to sensitive websites. I use it, for instance, on Paypal. To get into my Paypal account, you’ll need my account name, password, AND my unlocked iPhone.

Be careful out there.

TechHive Beta Blog ▻

I’ve recently subscribed to TechHive and I’m really digging it. The post volume is right in that sweetspot with regular posts but not too many regular posts and their technology coverage is generally stuff I’m interested in. This shouldn’t suprise you since Jason Snell is one of the moving forces behind it and Jason is a really smart guy.

ScreencastsOnline Monthly Magazine ▻

Don McAllister is one of my heroes. He built a business where no one said a business could exist. He’s been creating amazing screencasts for years and managed to turn it into a full-time gig. Now Don has started publishing his own magazine through the iPad newsstand. It includes some fantastic screencasts, Don’s Liverpool accent, and articles by others from the Mac community, including yours truly. The first issue is free. Check it out. Moreover, share it with some of your less nerdy friends who want to get better at using their Apple technologies.

As part of a bigger story, I love this explosion of independent publishing.

Hapy Birthday TRS 80 ▻

In 1978, I learned to program on a TRS-80. It went something like this.

10 Get on orange Schwinn 10-speed bike
20 Ride to Radio Shack
30 Progam many lines of basic including one seriously kick ass text adventure
40 Ride back home when store closed
50 Goto 10

Facebook Shenanigans ▻

One company’s investigation showed 80% of their Facebook ad clicks were bots. What worries me about Facebook is that the only way for them to earn the bucket loads of cash everyone thinks they should is a frontal assault on the privacy rights of their millions and millions of users. Creepy.