offnote there was a good time when 90% of user logins were "user" with password "password" ... Today that dropped to 40%