Maybe Site5 should ask better security questions then. If they want users to enter what is effectively a password for "Mother's maiden name" they should just ask for a security password.
Looks like they have allowed users to create their own for quite a while:
We have allowed customers to write their own security questions for over two and a half years now.
http://www.site5.com/blog/s5/security-and-social-engineering...
However there's nothing intrinsically wrong with the
maiden name question.
If mother's maiden name isn't a good enough security question, stop asking it! And we all know it isn't a good enough security question.
It's a pain, but I don't trust this "Mother's Maiden name" invention.
Problem is remembering this (and some offline systems have it as well, oh well)
So if you think I'm going to put the actual name there you're wrong. Maybe not +@sfghh#54$=24 but something different.