https://blog.kamens.us/2009/09/29/why-i-just-spent-three-days-changing-my-passwords-on-over-300-web-sites/