‘Forgot your password?’ may be weakest link

Some security researchers are beginning to sound the alarm about “password resetting” tools, suggesting they could be the weakest link in Web security.