Can anyone shed some light onto how they are going to be making money now? I know there is some kind of useful info they can derive from letting users voluntarily have their password db's scanned for strength/pw duplication/etc, is there some money to be made selling something derived from that to third parties?