> 
> From [Wired](http://blog.wired.com/27bstroke6/2008/09/palin-e-mail-ha.html) magazine:
> 
> 
> ...the Palin hack didn't require any
>  real skill. Instead, the hacker simply
>  reset Palin's password using her
>  birthdate, ZIP code and information
>  about where she met her spouse -- the
>  security question on her Yahoo
>  account, which was answered (Wasilla
>  High) by a simple Google search.
> 
> 
> 

We cannot trust such [security questions](http://web.archive.org/web/20130327040434/http://stackoverflow.com:80/questions/104680/what-are-some-good-security-questions) to reset forgotten passwords.   

How do you design a better system?