[RndTbl] security implications of "what's your rock-star name"-type quizzes

[Trevor Cordes]

That's why for security questions I use randomly generated, long strings. My security questions have stronger passwords than my passwords! 

Security questions aren't. They should be called insecurity questions. They're the stupidest idea ever. I would never program a web site with them.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.muug.mb.ca/pipermail/roundtable/attachments/20151008/b64325d5/attachment.html>