HACK ATTACK-Pt.2: hacker got into email, then went to sites to recover lost passwords via email. Email PW recovery is a bad, too insecure!