Today I signed up for Sponge Cell, which is an ajaxy calendar thing. To my surprise, my confirmation email from them contained both my username and password in plain text!
In today’s world of identity theft, spam, and hackdom, why on earth would a startup that is trying to create a buzz make such a rookie blunder? It was enough to make me not use their product. If they’re that slack with something as rudimentary as my login and password information, I can only imagine what they’re doing with my data.