I moderate a local list serve and increasingly must deal with folks whose aol, hotmail, yahoo, and other mail accounts have been hijacked so spammers bombard their address books with spam emails. Fresh from a quite detailed ArsTechnica post by Dan Goodin last week about the current state of website and password security, http://arstechnica.com/security/2012/08/passwords-under-assault/ , wanted to bring out some of the more potent points from the piece for the many folks who would benefit from practical and less technical advice. Password cracking has advanced to the point that choosing a dictionary word for a password or using a password of less than 9 characters is not a secure practice. Because of the number of passwords that have already been added to hacker databases, the common passwords using a word with numbers after it (e.g. strawman456) are also not secure. Avoid using your email address as a user name if possible. We have no control over whet...