at least @LinkedIn is letting users know to change their passwords right on the homepage after they log in.