Yahoo's Password Hack Shows Lack of Basic Security Know-How