[notthetup]

Why does this still happen? Aren't security best practices still not wide spread enough to dissuade people form doing this?

[phpnode]

because there's no way their service could ever work without storing passwords, a fact that this article completely ignores.