http://imgur.com/fcf2TGT
OK so I reset my password and then I get an email with the new password in the email:
http://imgur.com/6RIdVuG
They seem to think their systems are being breached by heartbleed bug or by bruteforce attacks. Seems to me sending plain text passwords via email might help prevent unauthorised domain transfers.