The "problem" they discuss is the secret-question routine used for hinting when users forget their passwords. However, for the secret-question problem to be rel

The "problem" they discuss is the secret-question routine used for hinting when users forget their passwords. However, for the secret-question problem to be relevant, users must first break the first rule of password security which is: Never commit a password to memory. Always write it down.