I'd just like to note that OpenID / OAuth 2.0 would make the Gawker password compromise completely irrelevant http://goo.gl/CwOOG