Comment by whatever1

We need a certification org like ISO to look into the practices of any data storing web service. Until recently we neglected it because the outsiders thought that it is straightforward to do so, but time after time we see ridiculous mistakes exposing sensitive data & passwords. This has to end yesterday. It is fine to fall victim of an elaborate hacking attack and lose customer data, it is not fine to not even follow a bare minimum of practices to protect their data.