Is no password hacker-proof anymore? Researchers at cybersecurity firm Trustwave said this week they found a stash of about two million passwords to major sites, including Facebook (FB), Twitter (TWTR), Google (GOOG) and Yahoo (which operates Yahoo Finance). The database included stolen information from some 320,000 email accounts, 318,000 Facebook accounts, and 21,000 Twitter users, nearly 60,000 Yahoo accounts, more than 8,000 LinkedIn accounts, and 70,000 Gmail, Google+ and YouTube accounts, Trustwave said. Two Russian social-networking sites, vk.com and odnoklassniki.ru, were also targeted, as well as 8,000 accounts at ADP, the payroll service provider, according to Trustwave. "We don't have evidence they logged into these accounts, but they probably did," John Miller, a security research manager at Trustwave, told CNNMoney. You have ‘terrible’ passwords Trustwave’s researchers combed through the data to analyze users’ password selection habits – and they weren’t impr...