Whoever uses the same password more than once, helps attackers