“If the media stopped saying 'hacking' and instead said 'figured out their password', people would take password security more seriously.”