20150411 tech.social: Why it is dumb to have 'password' as password