SourceForge, a popular online repository for software projects, is forcing users to change their password. The password reset is a proactive measure, not a reactive one, says the company. The company’s official announcement is sadly lacking in detail, which seems like a missed opportunity for education and encouragement about good security practices. The hard it is to calculate and test each password hash, the longer it takes for the crooks to get anything useful if they steal your data, and the safer we all are.”]

