well as the above guy said...his ID can be used to recover the account. BUT......to get the secret question you can send the guy a fake or spoofed e-mail from blizz (if u have his email) with a phishing site or another email address to send account info to...just check out some e-mail phishing things to find a good phishing templete to use.
