>Serious question: when is the last time anyone has had an account compromised because of a weak password? What is your definition of "weak"? I sometimes help

>Serious question: when is the last time anyone has had an account compromised because of a weak password? What is your definition of "weak"? I sometimes help my landlord fix their computer when they accumulate too much malware. One time I brought their tower home to do this and didn't get their Windows account password. Instead of calling them I decided to try a few things first, including their kids' names. Lo and behold, the second attempt was correct. Brute forcing a weak password probably isn't what you have to worry about when it comes to targeted attacks against weak passwords, but social engineering is.