There is more information and discussion on this topic at http://news.ycombinator.com/item?id=2150639

While I think the fact that Sourceforge is resetting passwords is useful, I think it would have been better communicated as a comment at the aforementioned link, as opposed to making a screenshot of an email message and submitting that.