mySpace.com, Pandora.com, not worth trusting.
I’m quite surprised to see two very prominent sites that use very archaic and insecure password resetting schemes. If you loose your password and request to have it sent to your email, they don’t do what you’d expect from any trustworthy site. They simply send you your original password.
(more…)