Recently, passwords to about 10,000 Hotmail, MSN and Live.com accounts were published online, reportedly the illicit haul of a phishing attack. According to Wired's Threat Level,

The list included only online account addresses that began with "A" or "B," suggesting that the list was only part of a larger cache of credentials. On Tuesday, the BBC reported that it had viewed a second list of more than 20,000 account credentials that included Gmail, Yahoo and AOL accounts, and that Google had uncovered a third list containing an unknown number of accounts.

Bogdan Calin of Acunetix snagged the passwords before they were taken down, and analyzed them. The takeaway?

"123456" was the most commonly used password.

Shocking! So, kids, get a little more creative. For how to pick a good password, see Scott's post here.