Fun with security procedures

[arkanaut]

So I'm applying to a job opening, and the employer's website makes me go through all these security procedures to create a user name, password, etc. Then when it comes to the part where it asks you for a security question, this particular website actually allowed you to write your own question. Doesn't this seem much more secure than all the

Comments

[spartana07]

cause then you can also forget your security answer AND question?

[arkanaut]

I presume that when you forget your password they will present you with the question you put in.

[magus145]

And then forget the answer. That's not mitigating the problem of forgetting the very security information you need to identify yourself. Yes, it's more secure, but so is a chosen password. The point is that if you forget your carefully chosen password, you probably shouldn't forget your home town or first pet's name, even if that information is less secure.

That being said, I prefer the pick your own question ones, but I can see how that's not scalable to the rest of the population.

[metallian]

That is a good idea.