"So, sure! People who read CodingHorror are concerned about the security issues...but how many of your users even know what the hell CodingHorror is?" If the t

"So, sure! People who read CodingHorror are concerned about the security issues...but how many of your users even know what the hell CodingHorror is?" If the topic being debated was about the blog in it's entirety and why Jeff Atwood writes it, you might have an argument here, but considering two people pointed to a blog entry I'm going to disagree wholeheartedly with everything you just said. The article makes a VERY good point that some folks very often use their email password as the de facto password throughout the Internet. Just because someone comes along and eloquently it's a bad practice doesn't mean people are automatically NOT going to do it, and immediately become more informed to privacy and security concerns. And even for people who don't use the same password, they just as easily don't want this information just flying across a random connection string for the sake of seeing what your "friends" are up to on this new socially-capable website. It's not about "Who reads this random arsed blog" any more than it is keeping in mind every avenue of user interaction that will occur on your site, and being accountable for how you use data given to you.