The horrors of bad passwords