Marc Hedlund: Sure, Security Is Hard, But…. The New York Times recently switched from one paid membership management system to another, and they changed the username and password of every paid account. For some reason, they’ve posted the system they used to choose new usernames and passwords on the Web for anyone to see.

