Password Reset Security Flaw

[Jamein]

People are throwing out the term hacked a lot, amusingly enough they don't get your passwords by 'hacking' you. 90% of the time people are stupid enough to click those emails that direct you to www.ffxiv.sqaureplexnix.com or whatever and go dump their username and PW into the boxes.

Protect your password.
Be careful what you do and the site you're on.
Don't go opening up every website link on every email.
Use a token for added security.

There is a perfectly safe system in place, if you fail to use it correctly, well then god help you.

Although on that note, SE SHOULD send you an email everytime your password is changed. Most companies do this.