[mothered]

An excellent thread to say the least.

I'm glad you've documented passwords stored In "Plaintext". Of all sites that I've compromised (and one as recent as yesterday), I'm appalled as to how many actually do store them In plain text. Furthermore, a lot of users utilize the same credentials (username/email:password) for other accounts, so all It takes for an attacker Is to hit a given combination on every major website (Facebook, Amazon, eBay, PayPal etc), and you can Imagine what happens thereafter.

I won't go Into detail on your other topics, you've covered them quite well. A very well structured and formulated thread.
Good job @Inori.