I don't get the fascination with MD5 cracking speeds. If you use different passwords for each site, a 7 character lowercase password would take 10 years to exhaust the password-space if a site limits you to 20 attempts per second. As long as you are using different, random passwords for each site, you can just change for password for InsecureApp once InsecureApp gets hacked.
I think we should be educating people on using different passwords for services rather than convincing them to use very long, complex passwords.
I think we should be educating people on using different passwords for services rather than convincing them to use very long, complex passwords.