I concede that discussion about J2O vs. the JCF is only marginally related; my point was only that different ethoses obtain in each. I don't think I have any further arguments to make and as such rest my case; there is no present functional difference between a program that lets you recover your own password and a program that lets you discover someone else's password against their will and without their knowledge. Password recovery systems only work on websites and such because they require you to input some other identification, usually your email address, to verify your identity. However, there is no place that email addresses are stored in .j2l files, and I doubt we could instantiate any tradition of putting one in the Bonus Level field or anything in case one ever forgets one's password, so that's not an option. Page claim.