Have web security questions gone overboard? With security math questions like this, who needs enemies??