The author of the blog post needs to get a copy of Password Gorilla ( <a href="https://github.com/zdia/gorilla/wiki" rel="nofollow">https://github.com/zdia/gorilla/wiki</a> ) and then he will be unlikely to ever be surprised again by finding his password on the back of someone else's t-shirt.