I strongly second this concern. I generate random strings as answers to my recovery questions. When I recently got asked one of the questions the support rep let out a sigh when asking (presumably because he saw the &quot;crazy&quot; answer) and then said &quot;yeah yeah, alright&quot; when I was about half way through the answer. That any company even suggests these insane security questions that anyone can trivially research is completely beyond me.