So I have just registered on a job website for Information Security roles.  Nothing exciting there.

What has amused me is that as part of that registration the site which specialises in Information Security, sent me a confirmation email, an email that included both my username and password in clear text.

Part of me is wondering if this is some sort of test, if you don’t comment on this then clearly you do not work in the field.

Why do websites continue to do this? this is such a school boy error.

And if they have got that wrong, then what other mistakes are they making?