Add to that, Stumbleupon. They also email your password to you in plain text after you register for an account. They do this after enforcing a password strengt

Add to that, Stumbleupon. They also email your password to you in plain text after you register for an account. They do this after enforcing a password strength requirement when you create the password. It's not like they're storing critical data or anything, but lots of people use the same password for a bunch of different things. It wouldn't take much to glean a password from one insecure site and try it out on other, more critical, services.