Don't use GoDaddy. Simple as that. If that hadn't happened, he'd still have his twitter account. >If I were using an @gmail.com email address for my Facebook

Don't use GoDaddy. Simple as that. If that hadn't happened, he'd still have his twitter account. >If I were using an @gmail.com email address for my Facebook login, the attacker would not have been able to access my Facebook account. Just google and the NSA then. Also, Gmail has an exposed password reset and social-engineerable support. A server running Postfix/Exim doesn't. I'd consider a domain with a good registrar far more secure than google.