In reply to Ryan Hellyer.

From what I gathered from comments in another thread, the emails didn't have anything to do with the actual strength of a password. I feel that they didn't actually "detect" anything; they just made the (likely correct) assumption that there were at going to be a fair number of insecure passwords in general, then reset every account.