Most 'FluffyBunny...' style addresses and usernames I see tend to end in a 2 digit number which is obviously the user's birth year, which they added when told that plain old 'FluffyBunny' wasn't available.

Not a very sensible idea, given how many sites have "What year where you born?" as one of their security questions.

>"What year where you born?"

Anecdata from me: I've never seen this as a security question,

I'm willing to concede that I didn't notice it because I just pick a security question at random and record it in my password database with a made up answer so that I can satisfy their test later on without using a real, guessable answer.

This is exactly what I do too.

I've mentioned before on here; it did come back to bite me once when I had to ring my insurance company and confirm that my mother's maiden name was... er... "Hitler"!

I personally think those sorts of "security" questions are stupid and I have a standard answer to all of the security questions so I don't have to remember what I put.