At our school everyone has a 6-digit number as their username and, by default, their last name as their password. So by simply going to file security, I can look up any number and get a name, or vice versa. Now that I have a name and number, I can login to the 90% of people's accounts who don't change their password.