There are about four ways of authenticating a person, in traditional security-think: something you know, something you have, something you are (fingerprint et a

There are about four ways of authenticating a person, in traditional security-think: something you know, something you have, something you are (fingerprint et al), and somewhere you are. The secret question is an attempt at the first method. However, "what's your mother's maiden name" fails because it's so easily discovered through web sites (Ancestry.com!) and via social engineering.