As email addresses from Yahoo and Hotmail are easy to hack I done it to my friends email once for fun (he never played habbo) it asks for a security question which can then allow them to access your email. So for example if it asks for favourite Historical figure you can simply ask the person this and they won't realize your going to hack them you type it in a presto your in their account.
Which is why I haven't set a security question.
So even though if you go to "forgot password" and then try to recover it via security question.. it'll have a question as default, but there will be no answer for it.
The only way to recover my account would be to steal my mobile.
As my alternative address is my brothers email, and he also has done the same as me.
Another flaw with hotmail is the fact that most people have their alternative address as one of their old hotmail accounts, and every 12 months, hotmail delete/clear out un-used hotmail accounts.
Therefore if someone had their alternative email address as (for example)
[email protected]
and it was not used for 12 months, it'll get deleted, leaving it open for someone to claim
Someone then claims it, and it's ALREADY linked up to someones hotmail as the alternative email, meaning you can request their password and have it sent to your newly made email.
I've hacked a few people this way a few years back. Not proud of it, but it's a flaw you should all know.