So I am right on both points eh
But 2) Can go a litle deeper than guesswork... For example whoever has access to your sign up information knows quite a bit.. its suprising what you can get from an email
Have a look at
www.securiteam.com
Type Yabb (the name of this massageboard) into the search box