It's a shame that a company with an already bad track record in user security would do something so careless yet again.