Attached Link: http://www.renderosity.com/messages.ez?Form.ShowMessage=614601

Bear, that was actually not about passwords as much as someone searching for e-mail addresses. They thought they could get to addresses through the "forgot my password" feature, but they were wrong. Here's a link to Tim's report on it.