With the preponderance of chain letters on Facebook, Myspace, in e-mail, even in DA, and all the other sites in the world, it's important to understand why they are dangerous.

Let's look at a common chain letter.

1. What's your full name?
This is either your full name up front, or broken down into first, middle, and last throughout the letter. Answering these gives someone the spelling, and the middle name/initial - something needed to sift between Jon Smithe and the John Smiths of the world.

2. What's your job?
Now there is a baseline being established. We don't think much of it, as we tell everyone what we do for a living. This is why it's important.

3. Name three places you've lived.
Oooh, it seems innocuous, but this is a lynch pin that equals jackpot. Now, there's a history being established. Plus, people tend to put where they live now as #1 on the list. Plus, most companies doing credit business when setting up accounts are now shifting to identity questions based on who you know (family) and then where you've lived.

Now, a phisher has a full name, location history, and current job/location. This is a huge trifecta in stealing an identity.

4. How old are you/When's your birthday?

Date. Of. Birth. Yatzee.

5. What's your pet's name?/Where did you grow up?/Grandfather's name (last name is mother's maiden name)/Favorite book-movie-band-tv show?
True, these seem innocuous. Now go to your banking web site, e-mail login, or any other place on the web where you have a Security question for a lost password. True, most send a reset password to your e-mail, but the e-mail just lets you in. Now they have access to your financial data. One simple change of address form online and your bank statements are going elsewhere. Then a copy of any kind of submitted application can be requested - which has your SSN# on it.

In the current economy, if you have good credit, banks want to give you more if you are a good credit risk. It doesn't take much for someone to get your information and get a slew of credit cards in your name. Plus, in the case of money mismanagement, you are guilty until proven innocent. Banks make you whole if someone messes with your accounts. But, if they open a new account, the onus in on you to prove innocence. And credit is the hardest thing to fix.

The rules of engagement in preventing these issues are numerous - and you probably don't have or are working toward a degree in Information Security. Something to keep in mind the next time you fill out an e-chain letter

-NSG