If further proof was needed that secret question "backup passwords" are a really, really bad idea, this is it. Exactly the same way Sarah Palin's account was "hacked".

People, and companies, have to take more responsibility for their own security. They can't just say "it wasn't my fault, Yahoo has that feature!" - they need to active dump yahoo, and anyone else offering these ludicrous backdoors which defeat the point of even having a password.