Dood, just last night my friend Chang, said he can get into my facebook and yahoo in 5 minutes. Obviously he didn't brute force it. But i found out that he went threw the forgot password and reset the password. ON facebook they ask for you email ID and then they send the email to your account. I think that he hacked my yahoo first, then he got on facebook and used the forgot password option. So to get the yahoo password he also used the forgot password option. He said that he brute forced some of the security questions and stuff.

You guys got any idea how he did all this? Thanks