In that case ...
they're shit sites.
I have seen a few forum-type sites which simply say "thank you for your password reset request. If the email address you entered was valid, you will recieve an email soon"
so there's no way to use it to distinguish between true account holders and guesses.
