Reminds me of how Mt. Gox used to hand out password resets with plaintext passwords in the query string on their own forums. Sounds like somebody should write

Reminds me of how Mt. Gox used to hand out password resets with plaintext passwords in the query string on their own forums. Sounds like somebody should write a book about all of the missteps in that debacle.