Time to rethink mandatory password changes | Hacker News Reader