Love and Authentication [video]
Addressing the problem of password reset
Passwords are ubiquitous, and users and service providers alike rely on them for their security. However, good passwords may sometimes be hard to remember. For years, security practitioners have battled with the dilemma of how to authenticate people who have forgotten their passwords...Good security questions should be based on long-lived personal preferences and knowledge, and avoid publicly available information.