Russian Hacker Selling 1.5 Million Facebook Accounts

If one can buy 1000 ID's for $25-$45, actual password strength is probably much less important than using different passwords for different sites. Why bother running a password library or brute force program when you can just purchase the ids/passwords for so cheap?

That's why I recommended a few password management tools in the next sentence. I assumed our readers would want something simple and effortless and well as secure.

Those accounts don't come with trusted real world connections. I'd imagine playing it right people buying these accounts would get really high conversion rates on offers they try and push through them, given that people are likely to trust friends with accounts that have been used properly before and aren't just accounts with 5000 random friends that don't actually know the person (there seems to be a market for those as well).