One of my bad passwords in the Weak Passwords Report is for MyCheckFree.
But I can’t do anything about it, because their web site limits passwords to 8 characters max. They even cut off anything pasted in the password box after 8 characters. Obviously I’ve already contacted them about this.
When I discover a company like this (based on domain), I’d like the ability to enter a link or e-mail address to contact the company, as well as a short description of the problem.
Then others who use this same terrible company will see that link or e-mail address, and can easily click, write, and send their own messages asking such a company to improve their security. This could help produce a groundswell of support pressuring companies who are cavalier about security to get better.