Password guru regrets past security advice and other news