I'm unsure if any other readers have come across the "Valued Opinions" website; basically you earn some form of credit for completing surveys. Now, I went ahead and created an account on the site with an awareness of the degree of information such a site ends up collecting on an individual, but I was surprised by one key thing - the password I entered was included in the email that confirmed my membership.
How kosher is this practice? I understand the risks inherent in sending such sensitive information over an insecure form such as email, but does this also necessarily mean that the password itself hasn't been stored encrypted?
Cheers
Jonathan
... 
