Recently active topics in friendfeed tagged with phishing

The site requests my Gmail password despite the presence of the Gmail Contacts API. This is an instance of the password anti-pattern (Google it). There are a variety of ways not to do this - allow people to import their data using the API, as well as using hCard/XFN, FOAF and other importers that do not require me to give out my password. This teaches users to phish. Good functionality, bad implementation.