Things are changing fora the worst, though slowly. In order to use their bug tracker, you now have to sign up to the Oracle integrated web single sign on thingy, which insists on invading your privacy in order to find out the name of your employer, your job title, etc. It is a small but irritating deterrent to filing bugs against VirtualBox.