-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Due to an attacker mass-abusing accounts with weak passwords, passwords that are the same as the username can no longer be used. Affected accounts can reset their password by e-mail to something more secure.

Please report the change back to your various communities in case someone needs help...

- -- brion vibber (brion @ wikimedia.org)