And in other news, humans are still predictable - why does this story ever make the news? Has anyone who cared about password security ever even bothered to read this type of report?