[alexhjones]

No need to brute force - if users re-used their master password, it will potentially cross-reference with the correct email and password combo from any number of previous data breaches and pwnage across the net.

[yasp]

Good news for people who followed best practices. "I don't have to outrun the bear; I just have to outrun you."

[AlexCoventry]

This bear has the ability to spin up an AWS cluster of bears, unfortunately.

[jacquesm]

There isn't just one bear.