The few times I've come across it, I've rather liked the set up whereby you as the user specify both the 'security' question and the answer as opposed to being forced to choose from the exact same list of questions you see on every website.
Seems far more sensible to me.
Biting the hand that feeds IT
