I’ll bet that the signup verification questions are the DDOSer’s #1 target