Chris Pirillo:

PayPal Denies $450 of Unauthorized Charges  —  On my birthday last Saturday, I received a “present” I wish I never had.  Due to some lax security policies that Apple has thankfully since updated, someone was able to use my birth date to obtain my iTunes password, and get into my account.