I wonder if the advice about having different passwords to different sites needs to be expanded: have different, unrelated usernames too.