A cybersecurity researcher discovered a publicly exposed trove of 149 million logins and passwords with info from countless sites and services.