I just did this. After registering, they sent me a confirmation "click this link to prove it's your real email address" message. After completing that, they sen

I just did this. After registering, they sent me a confirmation "click this link to prove it's your real email address" message. After completing that, they sent me a (plaintext) confirmation email, containing my username and password. Email around my password is bad enough. But the fact that the final confirmation message, containing my password, was several minutes removed from my initial registration, probably[1] demonstrates that they're not using one-way hashes for password storage. If this is correct, then it may just be that Facebooks' stewardship of my data is better than MOG's. [1] IIRC, the "prove it's my email" linked page asked me to log in. If so, then they might have intercepted that login request, and sent that back via email. That's possible, but I'd be surprised.