A more "lo-fi" attack vector: Many verify the user (for both free and premium) by last name and room number. Make a dictionary of a few common surnames and it's

A more "lo-fi" attack vector: Many verify the user (for both free and premium) by last name and room number. Make a dictionary of a few common surnames and it's pretty easy to brute force combinations.