Research validates common sense: “Security questions” aren’t. Posted on May 24, 2015 by jgordon Link. Civilians don’t know their passwords.