I liked this one too. They're emailing hashes of the users password, full name, and their encryption key as the "verify address" URL. Oh and once set, you can'

I liked this one too. They're emailing hashes of the users password, full name, and their encryption key as the "verify address" URL. Oh and once set, you can't change any password or delete your account. http://arstechnica.com/security/2013/01/cracking-tool-milks-weakness-to-reveal-some-mega-passwords/ http://arstechnica.com/security/2013/01/cracking-tool-milks-...