includes "Sign up for MakerBot communications" checked box (#175)
reset password request form
has two "Or, go back to login" links, one for Makerbot's login form and one for Thingiverse, probably due to sloppiness in the template (the one on Thingiverse only has the Thingiverse link)
requesting a second password reset token invalidates the previous one
reset password email
yes, requesting from makerbot.com sends the email from thingiverse.com, too - and they both link to a page on makerbot.com
going to accounts.makerbot.com when logged in from Thingiverse (after password reset) logs you into makerbot.com, slowly (or maybe you're already logged in and there's just a slow spinner on page load for no reason?)
all the labels on the form say they're for username, probably some sloppy copy+pasting in the template
there's a similar page on Thingiverse that has the username in the URL
I set the password to a 9000-character one, which was accepted, then I tried changing the password with an additional character appended to the "old password" and it was accepted, so they're probably not using the whole thing (bcrypt?)
Stray observations:
registration form
reset password request form
reset password email
reset password change form
change password form
username
, probably some sloppy copy+pasting in the template