Security questions are a cornerstone of much internet security. I'll look at what they are, how they fail, why you should avoid them, and what to do if you can't.