Originally Posted by
gippy
The reason you can repeatedly log into your friends account, is because you've logged in once from that i.p, once you've reset the password once, you can log in whenever you like with no problems.
You may have to reset twice but normally not, so if it was hacker as you said, he'd try log in, it'd activate a reset, owner would do a reset thinking a password change would be safe, when in reality if they're keylogged or whatever, they've just give the hacker free roam of their account with the new password.
Same as with a boost service, one reset and its fine.