Yeah, the "last 4 digits/letters of the password" we often use in live help etc... or if it's technical support they're already logged into our billing/support system already and that does the verification for us.

The main thing that we were seeing is the password reminders or "i forgot my password" type scenarios.

The "kissing" security question I've seen that a few times, along with "first crush" and "first employer".

I just can't get over how FREE people are with their information some times. The security questions at the banks are worse than pathetic - "what city were you born in" or "mothers maiden name" and my favorite "what is your phone number" - yes, that REALLY was a question at a Credit Union I belonged to. They've since removed it, but it was SO awful!

Security is always at the forefront of my mind - good and bad. Hopefully someone's brain is kicking into gear with how they address these sorts of issues in their own organization.