+1 for not storing clear text passwords.
I like the tone of the blog & how forthright they have been with dealing with the issue.
I like the tone of the blog & how forthright they have been with dealing with the issue.
That shouldn't need a +1.
Lots of room for improvement above and beyond these two points, sure, but at least they're not falling victim to the classic blunders.
Disallowing international sales means they'll probably also avoid getting involved in a land war in Asia.
Now if I can just find my iocane powder...
Still, it's going to be pretty tough getting your average customer back who hears they've been "hacked" and are afraid to create a new password. Not to mention the average customer's password is probably the same password across facebook, gmail, etc.
I am surprised that some of the big eCommerce companies still mail back the password in clear text. Just plain stupid.