Lessons in website security anti-patterns by Tesco
Hey Troy,
Thought you might be somewhat interested in this one. Remeber the cool guys over at http://www.realestate.com.au/  Just to refresh your memory..https://twitter.com/#!/realestate_au/status/2207319148043059...Anyway, "we are aware of this issue and are working on it".Click http://www.realestate.com.au/ then "Register".Then stand in utter amazement at their solution.-------------------------------------------Why do we need your email address?     *We send your password via email.*
     *Your email address is your log on.*
     *If you forget your password, we'll send you a new one.*
-------------------------------------------This is hilarious. I can only assume that they took offence to you choosing a "strong version" password, so they decided, how can we fix this? I know, lets just pick the password for them.So, their fix that they told you about, was to ensure that you can't pick a password at all, and they will still email you their "super strong version password"...> Thank you for registering. Your password has been sent to username[at]gmail.com. It should arrive shortly.12 seconds later.Your password is: DTCNE(In case people aren't aware, realestate.com.au is owned by HomeAway)