> What is more valuable to an attacker? Generally: Being able to deploy malware through a site users trust so you can attack them directly, en masse. But the

> What is more valuable to an attacker? Generally: Being able to deploy malware through a site users trust so you can attack them directly, en masse. But the password hashes are a good runner-up.