Yahoo's password hack shows that it failed security 101