Battle.net hacked

[Thorin]

http://www.slashgear.com/blizzard-hacked-battle-net-leaks-emails-and-more-10242491/

Blizzard got hacked and cryptographically "scrambled" passwords were stolen.  Also stolen were answers to secret questions, which means the passwords can be really easily reset.

So, anyone ever hear of Secure Remote Password (SRP) protocol?  It's apparently what Blizzard uses to secure passwords: http://en.wikipedia.org/wiki/Secure_Remote_Password_protocol.

[Mr. Analog]

Yowza, this is gonna cause some mayhem!

[Thorin]

I like how they use this really advanced technique of scrambling passwords but then store the answers to the secret questions in plain text so the hackers can just request a password reset and then set it to whatever they want.  Security, it's only as good as your weakest link, even if your strongest link is made out of two tons of tempered steel.