They store a hash (like MD5) of your password in there database. When you set a new password they hash it ready to put into the database, if the new hash and the old hash match. then the password you are trying to reset to is the same as the old one.. its still frustrating though.