In a recent scholarly paper researchers from Microsoft and Carnegie Mellon University argue that secret question mechanisms are insecure. The study involved 130 people who use Web mail services from Google, Microsoft, Yahoo and AOL, all of which have secret questions for password recovery.

Guest: Stuart Schechter, Microsoft Research