Well, maybe that point just got me all excited because I had to work on exactly that dilemma of bad security questions a few years ago for a big identity manage

Well, maybe that point just got me all excited because I had to work on exactly that dilemma of bad security questions a few years ago for a big identity management installation and we would end up with exactly those kind of a bit more personal/specific questions like who was your first manager, lyrics to favorite song, most significant politician... In my case, being European and only moved from my parents' house once in my life so far - yes, I do remember my (old) home phone number better than the one my mom switched to now. Either way, it is a surprisingly difficult topic and very dependent on the organization and people.