I wish there was a name for this kind of thing, because I see it a lot. Something is used a username in one context, then a password/authentication token in ano

I wish there was a name for this kind of thing, because I see it a lot. Something is used a username in one context, then a password/authentication token in another. (Ex: many libraries use your barcode number as your username) I suspect the mistake stems from not understanding how passwords are stored. (Eg: while yes, well set up systems hash passwords, usernames or any other identifier paired w the password are in cleartext, and in many cases huge swathes of the userbase can access them)