[wlug] Re: Attackers Don't Bother Brute-forcing Long Passwords, Microsoft Engineer Says