So he made a bussiness decission: weighed the risks and went for the most profitable one. Still, I think he's been careless. If you really want to give your us

So he made a bussiness decission: weighed the risks and went for the most profitable one. Still, I think he's been careless. If you really want to give your users a "recover password"(especially after you have reached success), do it in a sensible way. Use hardened authentication servers behind inspection firewalls(preferably encrypted so filesystem access isn't enough!!) but don't store them in the same database as the rest of your data. Or use hashes and store the plaintext(encrypted) in another system which will do the mailing. There are lots of options, none of them as good as slow-hashes-only solutions, but a better compromise between security and UX.