Even reputable news sites often only check that the e-mail address you have given is valid, but make no effort at all to verify that you are who you claim to be online.

BBC: Microsoft wants to change passwords for something better