This is something I started with a couple of other people in response to the RockYou incident: http://blockyou.org/ http://blockyou.org/ The overall goal is a

This is something I started with a couple of other people in response to the RockYou incident: http://blockyou.org/ http://blockyou.org/ The overall goal is a "community documentation of bad web authentication practices," but at a minimum it would be great to compile a list of websites that send out plaintext passwords when a user forgets their password. Anyone interested?