I went to a school once that had only just gotten a computer system.

Our usernames? First initial, then full last name, then the first 4 digits of your social.

The password? ...the last 5 digits of your social.

I was horrified. Not a single administrator saw this as a problem.