One popular security question used to confirm the identity of a person making a request is, “What is your mother’s maiden name?” Well Brad Graham points out that using Google, you can find that information for many people on genealogy sites. He discusses this in the context of retrieving other people’s passwords to their Gmail accounts, but it’s just as true for your credit card or anything else. The Gmail case is particularly egregious because you generally don’t tell other people your credit card numbers, but you do tell them your email address.