You work in internet security, know how many ways there are to crack a password, and still don't use a security token/authenticator? Even after their announcement of security breaches and required password changes? I had an attempted log-in at one point and was forced to change my password, but I had no problems.