Unbelievable. Stratfor was pwned because their mysql root password was null. How stupid could these folks be???