[danbmil99]

I had to read this like 3 times to understand that users were voluntarily typing their email password into a site. It's so ingrained in my behavior not to do that, I was trying to figure out, "how do they get the password?"

[danbmil99]

Wait -- are they just using the password you type for their site to log in and go through your gmail account (guessing that they're the same pw)? That's fraud. I don't care if it's in the fine print. I use multiple passwords, but not enough. If websites just start using my passwords to break into my private data on other sites, that's seriously fucked up.

[smanek]

No, users explicitly enter their email password.

I blame this on user stupidity.

[riffic]

I blame this on developer negligence.