A security researcher has discovered 149 million stolen login credentials in an unprotected database, including 900,000 ...