A massive security hole in BlogEngine.net was just revealed that allows anyone to see your passwords... Danny Douglass explains the issue and provides a patched BlogEngine.Core assembly to resolve the issue until the next release of BlogEngine is available.