Abusing the system.
I just decided that on one particular site that I use maybe twice a year, it’s easier to use the “forgot password” function and have the password reset every time I want to log in, rather than come up with a memorable password. Why? Because the challenge question, unlike the password, never has to be changed!
So I just put any old thing into the new password field, and forget about it until next time.
I’m sure this isn’t what the designers intended.
Hi Shrdlu! Yeah, I do the same thing with a couple of sites. What cracks me up are those sites that have nothing sensitive or critical associated with them, yet they insist on complex 8-character passwords.
Cheers,
Jack