In other words, the attack was nothing new or special: if you use the same password in many places, they're all in the same "pool". If one is compromised, they're all compromised. It's ironic (and stupid) that Jeff Attwood's OpenID — which is supposed to obsolete passwords — was compromised like this.

The lesson's simple: before you re-use a password think about what's in it's pool, and for fuck's sake use a unique password for OpenID and your password manager.