I think it really was delicious, or at least I've never encountered a phishing e-mail that had quite that subtle air of weariness about it, like their souls have been crushed by weeks of fruitless toil and abuse and they just want to stop feeling the pain. And all the headers, etc, work out, so I think it's legit.

But... yeah. They appear to think that a) my missing data was left on yahoo's servers [and I don't think it was]; b) my new AVOS delicious account has a different username and password from my old yahoo one, and therefore they couldn't possibly figure it out themselves and also there are no security issues [which, what?]; and c) that if I give them my Yahoo username and password, so that they can run the exact same automated data recovery program I've already run twice myself, everything will be mystically fixed.

To be honest I am disinclined to acquiesce to their request. :P I'm trying to decide if I care about my missing tags enough to send an e-mail back saying I'm not giving them my password/account in the clear, but give them my account name and tell them I haven't changed the password since well before the handover, and see what happens.