Taken from tonights CNN.com: http://money.cnn.com/2013/12/04/technology/security/passwords-stolen/index.html?hpt=hp_t1 There you have it. Make your own decisions but to be safe, I would really consider a change to something more complex than "password". This is no hoax..
What really pisses me of is the line "Miller said the team doesn't yet know how the virus got onto so many personal computers." Give me a break....they share our information like its water. What a bunch of bullshit. Thanks for the heads up cman!!
