From a "noob" move using incremental userID I understand, but using the same password for multiple users is crazy. Concur with the author > It's the response that tells you everything about an organization's security culture.