On Thursday night myself and a friend were at the video shop. When we got to the counter we were asked for the password on the account. My friend tried one password and that was incorrect. They then tried three or four other passwords and those were also incorrect. In the end it was a trick question, the guy at the counter was just testing.
It occurs to me that this is a brilliant user engineering attack for hackers. Get a job as a video store clerk then get users to reveal a range of their passwords. You already have all their other details on file such as their address, date of birth and even the video preferences might be quite revealing.
What do you think the chances are of one of those passwords being for something valuable like a work user account, bank login, or eBay account? I’d say high for a lot of people struggling to keep track of multiple passwords in the digital age.