News for hackers. Stuff that matters.
Re:The Problem with Every Implementation of a "Forgot Your P... by mleonhard on Friday September 19, 2008 @10:00PM (#309666)
But his "solution" is to stop using security questions and passwords. That doesn't sound like much of a solution to me.
Re:The Problem with Every Implementation of a "Forgot Your P... by albertcardona on Saturday September 20, 2008 @06:26AM (#309848)
Bruce mentions : "Passwords have reached the end of their useful life. Today, they only work for low-security applications. The secret question is just one manifestation of that fact."

I guess he means we all ought to be using encrypted key pairs and the like instead, or some other system not involving anything as guessable as a text word.