Definitely a strange choice, as many people have said. Missed the mark by a longshot, but if some media outlets get on this you might have a handful of already

Definitely a strange choice, as many people have said. Missed the mark by a longshot, but if some media outlets get on this you might have a handful of already angry/frustrated people getting even more angry/frustrated at BART for exactly what was described here. Although this is yet another example of golfclap-worthy choices made by those tasked with implementing the security of a government or government-affiliated website. Presumably utype_id of 0 has some unique quality, given that there are only two of them and they both have the only ids under ten thousand: Name: Partner Partner Email: partner@interactivate.com Password: partner Name: dev team Email: devteam@interactivate.com Password: admin123 Please excuse the mote of speculation involved in this, as I can't be certain that anything is indeed special about those accounts. But these days, if there is anything at all unique or administrative about those accounts, you can't encounter passwords like that and expect the site to be well-designed or secure in other areas.