...because inevitably, there will be weak passwords - same as the user name, or single dictionary word (perhaps with a trailing digit) - and John The Ripper will have those cracked sometime in the next couple of days.

There's not much good pr0n there these days anyway.

I've changed my bank / email / paypal / reg passwords now just in case, and I've reinforced my tinfoil hat.