Compounding the problem is the fact that the user password that goes out is sent in an easily cracked NTLM hash, which ...