When I read that The Hackers have my SSN again I'm not really that worried having lost count.
But if we had a Federally issued Secure ID, when (not if) that got hacked I would worry a lot.
Not so great an example of secret information …. TFA is useless, I think, unless you are allowed to pick the question. (Or, of course, you can give site-specific nonsense answers to repeated questions, but most people don't do that.)
Secret questions are still just something you know, therefore not a second factor from passwords. Secret questions are often worse than two factor because they also violate the "only you" part of the security factors by often asking mostly the equivalents of public record information making them generally only about as useful as tertiary usernames/IDs. (Which is why the advice these days is to treat them as passwords and give them pseudo-randomized phrases, unconnected to actual answers of the stated question.)
You are right. I was going along with what I perceived as my parent (https://news.ycombinator.com/item?id=12509768 )'s identification of 'secret' questions with TFA, but I shouldn't have. Thank you for the correction.
(Also, although surely there aren't many such people around here, for anyone who doesn't get your reference: http://thedailywtf.com/articles/WishItWas-TwoFactor- .)