A bunch of folks have sent over this story of Joseph Bonneau, an engineer from Google, who happened to win the NSA's award for "Best Scientific Cybersecurity Paper" for 2012, for his paper on The Science of Guessing: Analyzing an Anonymized Corpus of 70 Million Passwords.