I know this sucks when it happens to you, especially if you’re famous, but it really is kind of funny how easy it was.
As detailed in the postings, the Palin hack didn’t require any real skill. Instead, the hacker simply reset Palin’s password using her birthdate, ZIP code and information about where she met her spouse — the security question on her Yahoo account, which was answered (Wasilla High) by a simple Google search. [Threat Level from Wired.com]
This definitely makes a good case for two-factor authentication. That way just having the password would not be good enough to log in to her account – you would also need the physical token (like a SecurID) that she would own.