Research shows security "challenge questions" – such as "what's your mother's maiden name" – are lousy security

Cory Doctorow’s Pluralistic:

Not only are the answers to these questions pretty easy for attackers to guess or research (your mother’s maiden name is a matter of public record and your favorite food is “pizza”), but actual users really struggle to remember their answers.

Mitch Wagner @MitchWagner