How not to implement the "Forgot Password" feature

from here

This Japanese 7-Eleven security incident is a great example of why idiot-proof systems aren't good enough anymore. You need to make them asshole-proof too.