People, if the private botnets didn't made you disable password authentication already, do it for the NSA.