Millions of passwords are exposed by Facebook