If the attacker wanted my password that bad, they would be at my house and I wouldn't be on HackerNews.