Why is the Re-use of the Same Password for Different Websites Insecure?