Reminds me of a hosting company in my country. When you use their spaces thing, they generate a password for you (not being able to set your own is already a re

Reminds me of a hosting company in my country. When you use their spaces thing, they generate a password for you (not being able to set your own is already a red flag for me, but ok). It was "hidden" in the UI to look secure. However, the password itself was passed as an argument that was part of the URL. So everyone who logs access urls could see the password. I reported it, they fixed it quickly, but never acknowledged that it was a "security" issue.