most websites will at least require you to re-enter your password (over SSL) to change your key profile attributes or password
While that is the case for most sites, HN doesn't require you to enter your current password when changing your password (or any other information for that matter).