Questions used as security checks on ***sites need to be replaced by better tests to see who someone is, say researchers.

source