How Not to Handle Password Security
I tried to log in to a site I use (that will remain nameless — I’ve sent them an email about this) and found that my stored password was out of date. No idea why, but whatever. I clicked the “Forgot Password?” link. Here are the exact steps that followed: