I see that a lot of people are trying to reset my password on Gmail (since I keep on getting emails about it). I guess I must have picked up a highly desirable username. In any case, if you’re trying this, you may as well not bother. I’ve taken good care to write a decent question, with a completely un-guessable or un-find-out-able answer.
Google should start adding the IPs of the user who generates the password reset email to the emails they send out. That way at least I have a chance of knowing which losers are doing this…