re: #3 Targetpractice
Great, so now I’ve got to go through every website I’m registered at and change my passwords? That should only take a few hours. Fuck me.
It doesn’t help you to change it if the website in question hasn’t updated to deal with the bug. Charles talked about it a bit downstairs earlier.
I use a low value password where I don’t really care if it gets cracked for the vast majority of websites. It means I can remember how to log into things, and lets me save the brainpower for the complex passwords associated with the things that really matter.
For me, I find this to be an acceptable compromise between security and practicality.