[ale] evernote security breach

[jdp at algoloma.com (JD)]

> 
> You get the idea. It also helps using actual words as you can validate your identity over the phone with tech support. You could use random gibberish for the answers but it is really hard to spell
> 
> #$hasklwo<{}+.,J
> 
> over the phone to a native English speaker let alone a non-native speaker.

Thanks Keith!

I lie on password reset questions too, but had not thought about trying to tell
a CSR what my answers were.

Time to change those answers.  I will still be lying, just with nonsense words.