Also, given how verbose they are regarding their success, it would be decent of them to be more transparent about their mistakes. For instance, there was the fa

Also, given how verbose they are regarding their success, it would be decent of them to be more transparent about their mistakes. For instance, there was the fact that they store passwords either in clear text or with the possibility of decryption available on their server: http://blog.jgc.org/2009/05/can-you-trust-37signals-with-your.html http://blog.jgc.org/2009/05/can-you-trust-37signals-with-you... The 2 year lag on that deserves some explanation.