Spotify and Facebook: Is that phishing?
Amazing.<p>Also, this is yet another privacy threat that I dodged because I use the PwdHash extension (<a href="https://www.pwdhash.com/" rel="nofollow">https://www.pwdhash.com/</a>). <i>You</i> type the same password for all sites, but the extension invisibly uniquifies them on a per-site basis.