Do security questions subvert passwords?
Many Web sites nowadays require a (hopefully strong) password along with some pretty easy security questions. Sometimes it is not possible to avoid filling in the answers. Most of the time, it is not possible to formulate your own questions (e.g., "give me the other random string").
IMHO, this is a hefty security risk for the user. You pick up a secure password (maybe even a truly random one) and let your account open to every one who knows it (e.g. your birthday).
What do people do to mitigate this problem?