[edmccaffrey]

How can they use that for authentication if they don't already have the data to see if your answer is right?

[GBKS]

That's why I'm thinking that they don't use it for authentication. There were quite a few steps to go through, so my assumption would be that some steps are used for authentication and others are used to collect data.

Man, I'm realizing I must sound paranoid about Facebook.