Hacker News Reader

I thought your first sentence was sincere, but your last implies otherwise. I don't think everybody received this email.

We should be happy that WordPress didn't hide this fact and came clean by informing users. Of course, the email doesn't list when they noticed your password (or other passwords) recorded in plaintext, but at least it's been identified and steps taken to address the problem.

View on HN

I was admittedly a little heavy handed on the sarcasm (it's been a long day).

Absolutely appreciate that they were open and honest about this and that it was discovered during an audit and fixed.

Sigh was more that best practices may or may not have been followed up to this point, and there are likely many other companies with similar holes that may not have been as proactive or transparent as WP.

Reply on news.ycombinator.com