Bad passwords open new can of worms